should_failslab+0x5/0x20
[ 2578.258292]  kmem_cache_alloc+0x5b/0x310
[ 2578.258645]  ? mark_held_locks+0x9e/0xe0
[ 2578.258999]  create_object.isra.0+0x3a/0xa20
[ 2578.259378]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2578.259831]  kmem_cache_alloc_bulk+0x168/0x320
[ 2578.260228]  io_submit_sqes+0x6fe6/0x8610
[ 2578.260606]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2578.261033]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2578.261448]  ? lock_downgrade+0x6d0/0x6d0
[ 2578.261803]  ? find_held_lock+0x2c/0x110
[ 2578.267707]  ? io_submit_sqes+0x8610/0x8610
[ 2578.268080]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2578.268490]  ? wait_for_completion_io+0x270/0x270
[ 2578.268898]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2578.269288]  ? vfs_write+0x354/0xb10
[ 2578.269604]  ? fput_many+0x2f/0x1a0
[ 2578.269913]  ? ksys_write+0x1a9/0x260
[ 2578.270235]  ? __ia32_sys_read+0xb0/0xb0
[ 2578.270581]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2578.271022]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2578.271474]  do_syscall_64+0x33/0x40
[ 2578.283736]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2578.284167] RIP: 0033:0x7f2774755b19
[ 2578.284484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2578.286025] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2578.286670] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2578.287269] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2578.287891] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2578.288496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2578.289097] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:43:38 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

13:43:38 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

13:43:38 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5)

13:43:38 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:43:38 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60ffffffffff)

13:43:38 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x40020000, 0x0, 0x0, 0x0)

13:43:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xe0ffffff, 0x0, 0x0, 0x0)

13:43:55 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:43:55 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:43:55 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f7ac49f3000)

13:43:55 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60ff)

13:43:55 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000)

13:43:55 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56)

13:43:55 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2595.075874] FAULT_INJECTION: forcing a failure.
[ 2595.075874] name failslab, interval 1, probability 0, space 0, times 0
[ 2595.076965] CPU: 1 PID: 31834 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2595.077586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2595.078330] Call Trace:
[ 2595.078584]  dump_stack+0x107/0x167
[ 2595.078933]  should_fail.cold+0x5/0xa
[ 2595.079295]  ? create_object.isra.0+0x3a/0xa20
[ 2595.083761]  should_failslab+0x5/0x20
[ 2595.084115]  kmem_cache_alloc+0x5b/0x310
[ 2595.084495]  ? mark_held_locks+0x9e/0xe0
[ 2595.084874]  create_object.isra.0+0x3a/0xa20
[ 2595.085277]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2595.085755]  kmem_cache_alloc_bulk+0x168/0x320
[ 2595.086189]  io_submit_sqes+0x6fe6/0x8610
[ 2595.086603]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2595.087064]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2595.087513]  ? lock_downgrade+0x6d0/0x6d0
[ 2595.087917]  ? find_held_lock+0x2c/0x110
[ 2595.088299]  ? io_submit_sqes+0x8610/0x8610
[ 2595.088714]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2595.089171]  ? wait_for_completion_io+0x270/0x270
[ 2595.089625]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2595.090057]  ? vfs_write+0x354/0xb10
[ 2595.090404]  ? fput_many+0x2f/0x1a0
[ 2595.090747]  ? ksys_write+0x1a9/0x260
[ 2595.091107]  ? __ia32_sys_read+0xb0/0xb0
[ 2595.091502]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2595.092009]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2595.092488]  do_syscall_64+0x33/0x40
[ 2595.092842]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2595.093317] RIP: 0033:0x7f2774755b19
[ 2595.093668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2595.095342] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2595.096051] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2595.096697] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2595.097340] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2595.097978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2595.098610] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:43:55 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

13:43:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xffffff7f, 0x0, 0x0, 0x0)

13:43:55 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

13:43:55 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57)

13:43:55 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f7ac4bf3000)

13:43:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xffffffe0, 0x0, 0x0, 0x0)

[ 2595.249718] FAULT_INJECTION: forcing a failure.
[ 2595.249718] name failslab, interval 1, probability 0, space 0, times 0
[ 2595.252221] CPU: 0 PID: 31861 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2595.252862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2595.254668] Call Trace:
[ 2595.255443]  dump_stack+0x107/0x167
[ 2595.256490]  should_fail.cold+0x5/0xa
[ 2595.257599]  ? create_object.isra.0+0x3a/0xa20
[ 2595.258895]  should_failslab+0x5/0x20
[ 2595.260023]  kmem_cache_alloc+0x5b/0x310
[ 2595.261173]  ? mark_held_locks+0x9e/0xe0
[ 2595.262353]  create_object.isra.0+0x3a/0xa20
[ 2595.263602]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2595.265055]  kmem_cache_alloc_bulk+0x168/0x320
[ 2595.266348]  io_submit_sqes+0x6fe6/0x8610
[ 2595.267548]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2595.268994]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2595.270372]  ? lock_downgrade+0x6d0/0x6d0
[ 2595.271576]  ? find_held_lock+0x2c/0x110
[ 2595.272893]  ? io_submit_sqes+0x8610/0x8610
[ 2595.291171]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2595.291710]  ? wait_for_completion_io+0x270/0x270
[ 2595.292227]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2595.292738]  ? vfs_write+0x354/0xb10
[ 2595.293144]  ? fput_many+0x2f/0x1a0
[ 2595.293535]  ? ksys_write+0x1a9/0x260
[ 2595.293952]  ? __ia32_sys_read+0xb0/0xb0
[ 2595.294398]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2595.294936]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2595.295481]  do_syscall_64+0x33/0x40
[ 2595.295898]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2595.296447] RIP: 0033:0x7f2774755b19
[ 2595.296843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2595.304165] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2595.304978] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2595.305735] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2595.306487] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2595.307240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2595.307950] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:43:55 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb0ff20)

13:43:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0)

13:43:55 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f7ac59f3000)

13:44:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xa, 0x0, 0x0)

13:44:11 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:44:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58)

[ 2612.016379] FAULT_INJECTION: forcing a failure.
[ 2612.016379] name failslab, interval 1, probability 0, space 0, times 0
[ 2612.017410] CPU: 1 PID: 32206 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2612.017990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2612.018682] Call Trace:
[ 2612.018916]  dump_stack+0x107/0x167
[ 2612.019232]  should_fail.cold+0x5/0xa
[ 2612.019568]  should_failslab+0x5/0x20
[ 2612.020044]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2612.021103]  io_submit_sqes+0x6fe6/0x8610
[ 2612.022056]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2612.023136]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2612.024216]  ? lock_downgrade+0x6d0/0x6d0
[ 2612.025122]  ? find_held_lock+0x2c/0x110
[ 2612.026009]  ? io_submit_sqes+0x8610/0x8610
[ 2612.026955]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2612.028021]  ? wait_for_completion_io+0x270/0x270
[ 2612.029079]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2612.030109]  ? vfs_write+0x354/0xb10
[ 2612.030935]  ? fput_many+0x2f/0x1a0
[ 2612.031737]  ? ksys_write+0x1a9/0x260
[ 2612.032599]  ? __ia32_sys_read+0xb0/0xb0
[ 2612.033496]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2612.034665]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2612.035797]  do_syscall_64+0x33/0x40
[ 2612.036630]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2612.037781] RIP: 0033:0x7f2774755b19
[ 2612.038593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2612.042679] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2612.044378] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 2612.045923] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2612.047495] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2612.049080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2612.050682] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:44:11 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:11 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

13:44:11 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff1f)

13:44:12 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7f7ac5bf3000)

13:44:12 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x218, 0x0, 0x0)

13:44:12 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:12 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffffffffffff)

13:44:12 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1ffff000)

13:44:12 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x240, 0x0, 0x0)

13:44:12 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:44:12 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000)

13:44:12 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffffffffffff)

13:44:12 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59)

13:44:12 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

[ 2612.302503] FAULT_INJECTION: forcing a failure.
[ 2612.302503] name failslab, interval 1, probability 0, space 0, times 0
[ 2612.304228] CPU: 1 PID: 32337 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2612.305726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2612.307531] Call Trace:
[ 2612.308114]  dump_stack+0x107/0x167
[ 2612.308892]  should_fail.cold+0x5/0xa
[ 2612.309702]  ? create_object.isra.0+0x3a/0xa20
[ 2612.310681]  should_failslab+0x5/0x20
[ 2612.311485]  kmem_cache_alloc+0x5b/0x310
[ 2612.312371]  ? mark_held_locks+0x9e/0xe0
[ 2612.313240]  create_object.isra.0+0x3a/0xa20
[ 2612.314174]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2612.315261]  kmem_cache_alloc_bulk+0x168/0x320
[ 2612.316103]  io_submit_sqes+0x6fe6/0x8610
[ 2612.316479]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2612.316903]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2612.317317]  ? lock_downgrade+0x6d0/0x6d0
[ 2612.317670]  ? find_held_lock+0x2c/0x110
[ 2612.318022]  ? io_submit_sqes+0x8610/0x8610
[ 2612.318398]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2612.318811]  ? wait_for_completion_io+0x270/0x270
[ 2612.319225]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2612.319620]  ? vfs_write+0x354/0xb10
[ 2612.319967]  ? fput_many+0x2f/0x1a0
[ 2612.320760]  ? ksys_write+0x1a9/0x260
[ 2612.321570]  ? __ia32_sys_read+0xb0/0xb0
[ 2612.321943]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2612.322387]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2612.322827]  do_syscall_64+0x33/0x40
[ 2612.323145]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2612.323578] RIP: 0033:0x7f2774755b19
[ 2612.323909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2612.325454] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2612.326100] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2612.326701] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2612.327305] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2612.327921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2612.328566] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:44:28 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x9000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:44:28 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60)

13:44:28 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x309fc47a7f0000)

13:44:28 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20100000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xa00, 0x0, 0x0)

13:44:28 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20ffb000)

13:44:28 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:28 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffdef)

13:44:29 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff600000)

13:44:29 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x1802, 0x0, 0x0)

13:44:29 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:29 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffff5)

[ 2629.108501] FAULT_INJECTION: forcing a failure.
[ 2629.108501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2629.109867] CPU: 0 PID: 32652 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2629.110628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2629.111543] Call Trace:
[ 2629.111849]  dump_stack+0x107/0x167
[ 2629.112263]  should_fail.cold+0x5/0xa
[ 2629.112654]  _copy_from_user+0x2e/0x1b0
[ 2629.113061]  __copy_msghdr_from_user+0x91/0x4b0
[ 2629.113529]  ? __ia32_sys_shutdown+0x80/0x80
[ 2629.113980]  ? __lockdep_reset_lock+0x180/0x180
[ 2629.114455]  sendmsg_copy_msghdr+0xa1/0x160
[ 2629.114888]  ? do_recvmmsg+0x6d0/0x6d0
[ 2629.115275]  ? lock_chain_count+0x20/0x20
[ 2629.115693]  ? __is_insn_slot_addr+0x123/0x290
13:44:29 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x309fc57a7f0000)

[ 2629.116150]  ? lock_downgrade+0x6d0/0x6d0
[ 2629.116586]  ? mark_lock+0xf5/0x2df0
[ 2629.117138]  ? mark_lock+0xf5/0x2df0
[ 2629.117514]  io_sendmsg+0x62c/0x830
[ 2629.117880]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2629.118336]  ? mark_lock+0xf5/0x2df0
[ 2629.118715]  ? lock_chain_count+0x20/0x20
[ 2629.119132]  ? __lock_acquire+0xbb1/0x5b00
[ 2629.119572]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2629.120096]  ? __lock_acquire+0xbb1/0x5b00
[ 2629.120570]  io_issue_sqe+0x3b3/0x77b0
[ 2629.120967]  ? perf_trace_lock+0xac/0x490
[ 2629.121386]  ? io_connect+0x610/0x610
[ 2629.121766]  ? do_raw_spin_lock+0x121/0x260
[ 2629.122201]  ? lock_acquire+0x197/0x470
[ 2629.122594]  ? find_held_lock+0x2c/0x110
[ 2629.123004]  ? __fget_files+0x2cf/0x520
[ 2629.123398]  ? lock_downgrade+0x6d0/0x6d0
[ 2629.123814]  __io_queue_sqe+0x90/0x9d0
[ 2629.124219]  ? perf_trace_io_uring_register+0x500/0x500
[ 2629.124747]  ? io_issue_sqe+0x77b0/0x77b0
[ 2629.125157]  ? __fget_files+0x2f8/0x520
[ 2629.125566]  io_submit_sqes+0x44aa/0x8610
[ 2629.126009]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2629.126500]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2629.126982]  ? lock_downgrade+0x6d0/0x6d0
[ 2629.127390]  ? find_held_lock+0x2c/0x110
[ 2629.127801]  ? io_submit_sqes+0x8610/0x8610
[ 2629.128255]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2629.128744]  ? wait_for_completion_io+0x270/0x270
[ 2629.129226]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2629.129687]  ? vfs_write+0x354/0xb10
[ 2629.130062]  ? fput_many+0x2f/0x1a0
[ 2629.130427]  ? ksys_write+0x1a9/0x260
[ 2629.130810]  ? __ia32_sys_read+0xb0/0xb0
[ 2629.131219]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2629.131741]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2629.132273]  do_syscall_64+0x33/0x40
[ 2629.132646]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2629.133151] RIP: 0033:0x7f2774755b19
[ 2629.133526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2629.135306] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2629.136055] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2629.136768] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2629.137463] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2629.138160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2629.138855] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:44:29 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

13:44:29 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000)

13:44:29 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x4002, 0x0, 0x0)

13:44:46 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:46 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20100000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:46 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff)

13:44:46 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61)

13:44:46 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30bfc47a7f0000)

13:44:46 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000)

13:44:46 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:44:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000, 0x0, 0x0)

13:44:46 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = pidfd_getfd(r3, r3, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x1, 0x1010, r0, 0x8000000)
fadvise64(r5, 0x7, 0x6, 0x3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x44000, 0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0xd57, 0x0, 0x1f, 0x4, 0x1}, 0x5)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
fcntl$dupfd(r5, 0x0, r10)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0000}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:44:46 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60ffffffffff)

[ 2646.369442] FAULT_INJECTION: forcing a failure.
[ 2646.369442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2646.370894] CPU: 0 PID: 33009 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2646.371730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2646.372702] Call Trace:
[ 2646.373020]  dump_stack+0x107/0x167
[ 2646.373467]  should_fail.cold+0x5/0xa
[ 2646.373922]  _copy_from_user+0x2e/0x1b0
[ 2646.374414]  __copy_msghdr_from_user+0x91/0x4b0
[ 2646.374983]  ? __ia32_sys_shutdown+0x80/0x80
[ 2646.375534]  ? __lockdep_reset_lock+0x180/0x180
[ 2646.376094]  sendmsg_copy_msghdr+0xa1/0x160
[ 2646.376604]  ? do_recvmmsg+0x6d0/0x6d0
[ 2646.376992]  ? lock_chain_count+0x20/0x20
[ 2646.377412]  ? __is_insn_slot_addr+0x123/0x290
[ 2646.377876]  ? lock_downgrade+0x6d0/0x6d0
[ 2646.378294]  ? mark_lock+0xf5/0x2df0
[ 2646.378681]  ? mark_lock+0xf5/0x2df0
[ 2646.379059]  io_sendmsg+0x62c/0x830
[ 2646.379442]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2646.379896]  ? mark_lock+0xf5/0x2df0
[ 2646.380273]  ? lock_chain_count+0x20/0x20
[ 2646.380728]  ? __lock_acquire+0xbb1/0x5b00
[ 2646.381167]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2646.381699]  ? __lock_acquire+0xbb1/0x5b00
[ 2646.382116]  io_issue_sqe+0x3b3/0x77b0
[ 2646.382532]  ? perf_trace_lock+0xac/0x490
[ 2646.382954]  ? io_connect+0x610/0x610
[ 2646.383338]  ? do_raw_spin_lock+0x121/0x260
[ 2646.383788]  ? lock_acquire+0x197/0x470
[ 2646.384184]  ? find_held_lock+0x2c/0x110
[ 2646.384633]  ? __fget_files+0x2cf/0x520
[ 2646.385031]  ? lock_downgrade+0x6d0/0x6d0
[ 2646.385466]  __io_queue_sqe+0x90/0x9d0
[ 2646.385862]  ? perf_trace_io_uring_register+0x500/0x500
[ 2646.386400]  ? io_issue_sqe+0x77b0/0x77b0
[ 2646.386826]  ? __fget_files+0x2f8/0x520
[ 2646.387239]  io_submit_sqes+0x44aa/0x8610
[ 2646.387699]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2646.388198]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2646.388720]  ? lock_downgrade+0x6d0/0x6d0
[ 2646.389131]  ? find_held_lock+0x2c/0x110
[ 2646.389555]  ? io_submit_sqes+0x8610/0x8610
[ 2646.389992]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2646.390481]  ? wait_for_completion_io+0x270/0x270
[ 2646.390972]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2646.391448]  ? vfs_write+0x354/0xb10
[ 2646.391826]  ? fput_many+0x2f/0x1a0
[ 2646.392193]  ? ksys_write+0x1a9/0x260
[ 2646.392610]  ? __ia32_sys_read+0xb0/0xb0
[ 2646.393025]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2646.393554]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2646.394070]  do_syscall_64+0x33/0x40
[ 2646.394463]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2646.394971] RIP: 0033:0x7f2774755b19
[ 2646.395347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2646.397155] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2646.397911] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2646.398617] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2646.399318] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2646.400032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2646.400763] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:44:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

13:44:46 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:46 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30bfc57a7f0000)

13:44:46 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:44:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xa000000, 0x0, 0x0)

13:44:46 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c)
accept4(r0, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x80800)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x58ae, 0x54a5, 0x0, 0x0, 0x0)

13:44:46 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7fc4554b4000)

13:45:02 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:45:02 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

13:45:02 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7fc4556b4000)

13:45:02 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x18020000, 0x0, 0x0)

13:45:02 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62)

13:45:02 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x4000010, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x46e2, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)

13:45:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x8, 0x8}, 0x7fffffff)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2662.391893] FAULT_INJECTION: forcing a failure.
[ 2662.391893] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2662.393190] CPU: 1 PID: 33692 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2662.393832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2662.394577] Call Trace:
[ 2662.394854]  dump_stack+0x107/0x167
[ 2662.395197]  should_fail.cold+0x5/0xa
[ 2662.395559]  _copy_from_user+0x2e/0x1b0
[ 2662.395956]  __copy_msghdr_from_user+0x91/0x4b0
[ 2662.396380]  ? __ia32_sys_shutdown+0x80/0x80
[ 2662.396837]  ? __lockdep_reset_lock+0x180/0x180
[ 2662.397258]  sendmsg_copy_msghdr+0xa1/0x160
[ 2662.397633]  ? do_recvmmsg+0x6d0/0x6d0
[ 2662.398007]  ? lock_chain_count+0x20/0x20
[ 2662.398392]  ? __is_insn_slot_addr+0x123/0x290
[ 2662.398809]  ? lock_downgrade+0x6d0/0x6d0
[ 2662.399212]  ? mark_lock+0xf5/0x2df0
[ 2662.399553]  ? mark_lock+0xf5/0x2df0
[ 2662.399919]  io_sendmsg+0x62c/0x830
[ 2662.400268]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2662.400849]  ? mark_lock+0xf5/0x2df0
[ 2662.401579]  ? lock_chain_count+0x20/0x20
[ 2662.402396]  ? __lock_acquire+0xbb1/0x5b00
[ 2662.403236]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2662.404238]  ? __lock_acquire+0xbb1/0x5b00
[ 2662.405155]  io_issue_sqe+0x3b3/0x77b0
[ 2662.405828]  ? perf_trace_lock+0xac/0x490
[ 2662.406538]  ? io_connect+0x610/0x610
[ 2662.407178]  ? do_raw_spin_lock+0x121/0x260
[ 2662.407914]  ? lock_acquire+0x197/0x470
[ 2662.408591]  ? find_held_lock+0x2c/0x110
[ 2662.409566]  ? __fget_files+0x2cf/0x520
[ 2662.410315]  ? lock_downgrade+0x6d0/0x6d0
[ 2662.411099]  __io_queue_sqe+0x90/0x9d0
[ 2662.411831]  ? perf_trace_io_uring_register+0x500/0x500
[ 2662.412904]  ? io_issue_sqe+0x77b0/0x77b0
[ 2662.413700]  ? __fget_files+0x2f8/0x520
[ 2662.414472]  io_submit_sqes+0x44aa/0x8610
[ 2662.415292]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2662.416229]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2662.417296]  ? lock_downgrade+0x6d0/0x6d0
[ 2662.418090]  ? find_held_lock+0x2c/0x110
[ 2662.418891]  ? io_submit_sqes+0x8610/0x8610
[ 2662.419741]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2662.420715]  ? wait_for_completion_io+0x270/0x270
[ 2662.421838]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2662.422702]  ? vfs_write+0x354/0xb10
[ 2662.423423]  ? fput_many+0x2f/0x1a0
[ 2662.424103]  ? ksys_write+0x1a9/0x260
[ 2662.424764]  ? __ia32_sys_read+0xb0/0xb0
[ 2662.425148]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2662.425644]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2662.426119]  do_syscall_64+0x33/0x40
[ 2662.426479]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2662.426943] RIP: 0033:0x7f2774755b19
[ 2662.427290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2662.429472] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2662.430879] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2662.432203] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2662.433729] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2662.434967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2662.436194] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:45:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

13:45:02 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:02 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7fc4564b4000)

13:45:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x2643, &(0x7f0000000140)={0x0, 0x598b, 0x10, 0x1, 0x33}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=<r0=>0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x6, 0xffffffffffffffe1}, 0x9)
r1 = syz_io_uring_setup(0x5116, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x51}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x40020000, 0x0, 0x0)

13:45:02 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:02 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb0ff2000000000)

13:45:20 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7fc4566b4000)

13:45:20 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:20 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:45:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xe0ffffff, 0x0, 0x0)

13:45:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63)

13:45:20 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x1}, 0x7f)
r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0)
close(r5)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb)
setrlimit(0x7, &(0x7f0000000000))
r8 = dup(r7)
ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:20 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff1f00000000)

13:45:20 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2680.462448] FAULT_INJECTION: forcing a failure.
[ 2680.462448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2680.463506] CPU: 1 PID: 34134 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2680.464085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2680.464748] Call Trace:
[ 2680.464983]  dump_stack+0x107/0x167
[ 2680.465286]  should_fail.cold+0x5/0xa
[ 2680.465603]  _copy_from_user+0x2e/0x1b0
[ 2680.465933]  __copy_msghdr_from_user+0x91/0x4b0
[ 2680.466313]  ? __ia32_sys_shutdown+0x80/0x80
[ 2680.466678]  ? __lockdep_reset_lock+0x180/0x180
[ 2680.467063]  sendmsg_copy_msghdr+0xa1/0x160
[ 2680.467414]  ? do_recvmmsg+0x6d0/0x6d0
[ 2680.467731]  ? lock_chain_count+0x20/0x20
[ 2680.468071]  ? __is_insn_slot_addr+0x123/0x290
[ 2680.468440]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.468778]  ? mark_lock+0xf5/0x2df0
[ 2680.469097]  ? mark_lock+0xf5/0x2df0
[ 2680.469402]  io_sendmsg+0x62c/0x830
[ 2680.469701]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2680.470072]  ? mark_lock+0xf5/0x2df0
[ 2680.470379]  ? lock_chain_count+0x20/0x20
[ 2680.470720]  ? __lock_acquire+0xbb1/0x5b00
[ 2680.471075]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2680.471499]  ? __lock_acquire+0xbb1/0x5b00
[ 2680.471844]  io_issue_sqe+0x3b3/0x77b0
[ 2680.472167]  ? perf_trace_lock+0xac/0x490
[ 2680.472507]  ? io_connect+0x610/0x610
[ 2680.472816]  ? do_raw_spin_lock+0x121/0x260
[ 2680.473194]  ? lock_acquire+0x197/0x470
[ 2680.473514]  ? find_held_lock+0x2c/0x110
[ 2680.473850]  ? __fget_files+0x2cf/0x520
[ 2680.474170]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.474508]  __io_queue_sqe+0x90/0x9d0
[ 2680.474826]  ? perf_trace_io_uring_register+0x500/0x500
[ 2680.475254]  ? io_issue_sqe+0x77b0/0x77b0
[ 2680.475586]  ? __fget_files+0x2f8/0x520
[ 2680.475918]  io_submit_sqes+0x44aa/0x8610
[ 2680.476271]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2680.476672]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2680.477078]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.477411]  ? find_held_lock+0x2c/0x110
[ 2680.477744]  ? io_submit_sqes+0x8610/0x8610
[ 2680.478099]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2680.478491]  ? wait_for_completion_io+0x270/0x270
[ 2680.478882]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2680.479254]  ? vfs_write+0x354/0xb10
[ 2680.479555]  ? fput_many+0x2f/0x1a0
[ 2680.479850]  ? ksys_write+0x1a9/0x260
[ 2680.480157]  ? __ia32_sys_read+0xb0/0xb0
[ 2680.480488]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2680.480915]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2680.481338]  do_syscall_64+0x33/0x40
[ 2680.481641]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2680.482052] RIP: 0033:0x7f2774755b19
[ 2680.482353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2680.483806] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2680.484416] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2680.484999] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2680.485568] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2680.486135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2680.486704] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:45:20 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:20 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
dup3(r0, r5, 0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:20 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000)

13:45:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f, 0x0, 0x0)

13:45:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64)

13:45:20 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2680.639774] FAULT_INJECTION: forcing a failure.
[ 2680.639774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2680.640934] CPU: 1 PID: 34446 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2680.641484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2680.642143] Call Trace:
[ 2680.642366]  dump_stack+0x107/0x167
[ 2680.642662]  should_fail.cold+0x5/0xa
[ 2680.642977]  _copy_from_user+0x2e/0x1b0
[ 2680.643306]  __copy_msghdr_from_user+0x91/0x4b0
[ 2680.643684]  ? __ia32_sys_shutdown+0x80/0x80
[ 2680.644045]  ? __lockdep_reset_lock+0x180/0x180
[ 2680.644428]  sendmsg_copy_msghdr+0xa1/0x160
[ 2680.644777]  ? do_recvmmsg+0x6d0/0x6d0
[ 2680.645107]  ? lock_chain_count+0x20/0x20
[ 2680.645444]  ? __is_insn_slot_addr+0x123/0x290
[ 2680.645812]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.646146]  ? mark_lock+0xf5/0x2df0
[ 2680.646446]  ? mark_lock+0xf5/0x2df0
[ 2680.646756]  io_sendmsg+0x62c/0x830
[ 2680.647050]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2680.647417]  ? mark_lock+0xf5/0x2df0
[ 2680.647724]  ? lock_chain_count+0x20/0x20
[ 2680.648061]  ? __lock_acquire+0xbb1/0x5b00
[ 2680.648414]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2680.648837]  ? __lock_acquire+0xbb1/0x5b00
[ 2680.649195]  io_issue_sqe+0x3b3/0x77b0
[ 2680.649514]  ? perf_trace_lock+0xac/0x490
[ 2680.649857]  ? io_connect+0x610/0x610
[ 2680.650162]  ? do_raw_spin_lock+0x121/0x260
[ 2680.650509]  ? lock_acquire+0x197/0x470
[ 2680.650826]  ? find_held_lock+0x2c/0x110
[ 2680.651156]  ? __fget_files+0x2cf/0x520
[ 2680.651474]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.651810]  __io_queue_sqe+0x90/0x9d0
[ 2680.652125]  ? perf_trace_io_uring_register+0x500/0x500
[ 2680.652550]  ? io_issue_sqe+0x77b0/0x77b0
[ 2680.652880]  ? __fget_files+0x2f8/0x520
[ 2680.653231]  io_submit_sqes+0x44aa/0x8610
[ 2680.653585]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2680.653984]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2680.654374]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.654707]  ? find_held_lock+0x2c/0x110
[ 2680.655039]  ? io_submit_sqes+0x8610/0x8610
[ 2680.655394]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2680.655784]  ? wait_for_completion_io+0x270/0x270
[ 2680.656173]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2680.656548]  ? vfs_write+0x354/0xb10
[ 2680.656850]  ? fput_many+0x2f/0x1a0
[ 2680.657157]  ? ksys_write+0x1a9/0x260
[ 2680.657465]  ? __ia32_sys_read+0xb0/0xb0
[ 2680.657796]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2680.658216]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2680.658631]  do_syscall_64+0x33/0x40
[ 2680.658931]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2680.659340] RIP: 0033:0x7f2774755b19
[ 2680.659641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2680.661107] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2680.661711] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2680.662278] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2680.662843] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2680.663411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2680.663977] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:45:36 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe0, 0x0, 0x0)

13:45:36 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:36 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:45:36 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x81)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:36 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x404b55c47f0000)

13:45:36 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:36 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65)

13:45:36 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000)

13:45:36 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0)

[ 2696.529127] FAULT_INJECTION: forcing a failure.
[ 2696.529127] name failslab, interval 1, probability 0, space 0, times 0
[ 2696.530148] CPU: 1 PID: 34797 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2696.530729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2696.531419] Call Trace:
[ 2696.531655]  dump_stack+0x107/0x167
[ 2696.531968]  should_fail.cold+0x5/0xa
[ 2696.532298]  ? create_object.isra.0+0x3a/0xa20
[ 2696.532691]  should_failslab+0x5/0x20
[ 2696.533019]  kmem_cache_alloc+0x5b/0x310
[ 2696.533389]  ? mark_held_locks+0x9e/0xe0
[ 2696.533739]  create_object.isra.0+0x3a/0xa20
[ 2696.534115]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2696.534552]  kmem_cache_alloc_bulk+0x168/0x320
[ 2696.534948]  io_submit_sqes+0x6fe6/0x8610
[ 2696.535322]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2696.535746]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2696.536160]  ? lock_downgrade+0x6d0/0x6d0
[ 2696.536511]  ? find_held_lock+0x2c/0x110
[ 2696.536864]  ? io_submit_sqes+0x8610/0x8610
[ 2696.537253]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2696.537671]  ? wait_for_completion_io+0x270/0x270
[ 2696.538085]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2696.538494]  ? vfs_write+0x354/0xb10
[ 2696.538812]  ? fput_many+0x2f/0x1a0
[ 2696.539122]  ? ksys_write+0x1a9/0x260
[ 2696.539494]  ? __ia32_sys_read+0xb0/0xb0
[ 2696.539843]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2696.540286]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2696.540725]  do_syscall_64+0x33/0x40
[ 2696.541040]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2696.541498] RIP: 0033:0x7f2774755b19
[ 2696.541816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2696.543349] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2696.543991] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 2696.544587] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2696.545197] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2696.545798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2696.546397] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:45:36 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x404b56c47f0000)

13:45:36 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

13:45:36 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:36 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:36 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000003c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
openat(r3, &(0x7f0000000340)='./file0\x00', 0x400, 0x148)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x13, r0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
inotify_rm_watch(r6, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0)
ftruncate(r7, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0xe7)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r10=>0x0, <r11=>0x0})
syz_io_uring_submit(r1, r9, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f00000000c0)={r10, r11+10000000}, 0x1, 0x1}, 0x20)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:36 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000, 0x0, 0x0)

13:45:36 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)

13:45:36 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:36 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66)

[ 2696.791700] FAULT_INJECTION: forcing a failure.
[ 2696.791700] name failslab, interval 1, probability 0, space 0, times 0
[ 2696.792893] CPU: 0 PID: 35142 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2696.794220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2696.794986] Call Trace:
[ 2696.795240]  dump_stack+0x107/0x167
[ 2696.795584]  should_fail.cold+0x5/0xa
[ 2696.795943]  ? create_object.isra.0+0x3a/0xa20
[ 2696.796369]  should_failslab+0x5/0x20
[ 2696.796727]  kmem_cache_alloc+0x5b/0x310
[ 2696.797107]  ? mark_held_locks+0x9e/0xe0
[ 2696.797500]  create_object.isra.0+0x3a/0xa20
[ 2696.797912]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2696.798389]  kmem_cache_alloc_bulk+0x168/0x320
[ 2696.798823]  io_submit_sqes+0x6fe6/0x8610
[ 2696.799231]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2696.799695]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2696.800149]  ? lock_downgrade+0x6d0/0x6d0
[ 2696.800534]  ? find_held_lock+0x2c/0x110
[ 2696.800916]  ? io_submit_sqes+0x8610/0x8610
[ 2696.801643]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2696.802096]  ? wait_for_completion_io+0x270/0x270
[ 2696.802548]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2696.802978]  ? vfs_write+0x354/0xb10
[ 2696.803326]  ? fput_many+0x2f/0x1a0
[ 2696.803665]  ? ksys_write+0x1a9/0x260
[ 2696.804019]  ? __ia32_sys_read+0xb0/0xb0
[ 2696.804398]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2696.804883]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2696.805382]  do_syscall_64+0x33/0x40
[ 2696.805729]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2696.806200] RIP: 0033:0x7f2774755b19
[ 2696.806545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2696.808219] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2696.808920] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2696.809585] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2696.810239] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2696.810893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2696.811547] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:45:55 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x38c4, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:55 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20100000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:45:55 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67)

13:45:55 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x406b55c47f0000)

13:45:55 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffff600000)

13:45:55 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

13:45:55 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2715.227300] FAULT_INJECTION: forcing a failure.
[ 2715.227300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2715.228383] CPU: 1 PID: 35555 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2715.228973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2715.229685] Call Trace:
[ 2715.229928]  dump_stack+0x107/0x167
[ 2715.230245]  should_fail.cold+0x5/0xa
[ 2715.230581]  _copy_from_user+0x2e/0x1b0
[ 2715.230931]  __copy_msghdr_from_user+0x91/0x4b0
[ 2715.231332]  ? __ia32_sys_shutdown+0x80/0x80
[ 2715.231718]  ? __lockdep_reset_lock+0x180/0x180
[ 2715.232125]  sendmsg_copy_msghdr+0xa1/0x160
[ 2715.232495]  ? do_recvmmsg+0x6d0/0x6d0
[ 2715.232829]  ? lock_chain_count+0x20/0x20
[ 2715.233187]  ? __is_insn_slot_addr+0x123/0x290
[ 2715.233599]  ? lock_downgrade+0x6d0/0x6d0
[ 2715.233964]  ? mark_lock+0xf5/0x2df0
[ 2715.234284]  ? mark_lock+0xf5/0x2df0
[ 2715.234609]  io_sendmsg+0x62c/0x830
[ 2715.234926]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2715.235318]  ? mark_lock+0xf5/0x2df0
[ 2715.235645]  ? lock_chain_count+0x20/0x20
[ 2715.236005]  ? __lock_acquire+0xbb1/0x5b00
[ 2715.236381]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2715.236833]  ? __lock_acquire+0xbb1/0x5b00
[ 2715.237201]  io_issue_sqe+0x3b3/0x77b0
[ 2715.237557]  ? perf_trace_lock+0xac/0x490
[ 2715.237918]  ? io_connect+0x610/0x610
[ 2715.238246]  ? do_raw_spin_lock+0x121/0x260
[ 2715.238621]  ? lock_acquire+0x197/0x470
[ 2715.238962]  ? find_held_lock+0x2c/0x110
[ 2715.239319]  ? __fget_files+0x2cf/0x520
[ 2715.239660]  ? lock_downgrade+0x6d0/0x6d0
[ 2715.240019]  __io_queue_sqe+0x90/0x9d0
[ 2715.240356]  ? perf_trace_io_uring_register+0x500/0x500
[ 2715.240812]  ? io_issue_sqe+0x77b0/0x77b0
[ 2715.241167]  ? __fget_files+0x2f8/0x520
[ 2715.241531]  io_submit_sqes+0x44aa/0x8610
[ 2715.241909]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2715.242335]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2715.242749]  ? lock_downgrade+0x6d0/0x6d0
[ 2715.243104]  ? find_held_lock+0x2c/0x110
[ 2715.243456]  ? io_submit_sqes+0x8610/0x8610
[ 2715.243834]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2715.244251]  ? wait_for_completion_io+0x270/0x270
[ 2715.244667]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2715.245064]  ? vfs_write+0x354/0xb10
[ 2715.245384]  ? fput_many+0x2f/0x1a0
[ 2715.245712]  ? ksys_write+0x1a9/0x260
[ 2715.246041]  ? __ia32_sys_read+0xb0/0xb0
[ 2715.246394]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2715.246843]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2715.247287]  do_syscall_64+0x33/0x40
[ 2715.247608]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2715.248046] RIP: 0033:0x7f2774755b19
[ 2715.248367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2715.249929] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2715.250574] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 2715.251176] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2715.251778] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2715.252378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2715.252979] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:45:55 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:55 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x406b56c47f0000)

13:45:55 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4000, @fd_index=0x2, 0xd0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f0000000640)=""/73, 0x49}], 0x6, 0x4}, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x89)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x6ab0e27bbed297cc, 0x0, {0x0, r4}}, 0x2)
close(r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0xf17d349ce9f40dbc)
syz_io_uring_setup(0x160f, &(0x7f0000000140)={0x0, 0x9c33, 0x2, 0x1, 0x12e, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000240))

13:45:55 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x900000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:45:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xa00000000000000, 0x0, 0x0)

13:45:55 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:45:55 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r8=>r0, {0x800}}, './file0\x00'})
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r8, 0x7, {0x0, r5}, 0x6, 0x0, 0x1, {0x0, 0x0, r5}}, 0x0)
r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000100)=<r12=>0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r13}}, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r13}}, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:45:55 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

13:45:55 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b4, 0x0, @perf_config_ext={0x1f, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x5, 0x8, 0x82, 0x20, 0x0, 0xe35, 0x3040, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000, 0x7ff}, 0x1, 0x4fb56128, 0x5, 0x6, 0x9, 0xfffffff7, 0x6, 0x0, 0x4, 0x0, 0x71ef}, 0x0, 0xffffffffffffffff, r0, 0xb)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0xbb803ed15c8ef1bb, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
r8 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x6, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r8, 0x341ac000)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_io_uring_submit(r7, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x46c}, 0x1}, 0x5)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r11, &(0x7f00000007c0)=""/180, 0xb4)
io_uring_enter(r11, 0x4655, 0x3e1e, 0x3, &(0x7f0000000040)={[0xfff]}, 0x8)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:11 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:11 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:46:11 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x3c, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x3c, r4, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xb4, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf, 0x65}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1200}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2652506d2e1a9fbdb11a2aee782208a9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="26b54f7417b41a9df46e44244f1e78a909420d9a333ea226f3ef85e0e7c47cb4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cc542a16d252bcea03642a982dd0bbf3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1c85c41829ad5e7fbbd5665cfeb22f23"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a63141606568699a8c6ff12e5d297473"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000)
syz_io_uring_setup(0x48ea, &(0x7f0000000040)={0x0, 0x389f, 0x8, 0x1, 0x10a, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:11 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x195}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = fork()
ptrace(0x10, r4)
ptrace$setsig(0x15, r4, 0xc65, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0)
close(r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x6, 0xfffffffffffffffc, &(0x7f0000001680)=[{&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/7, 0x7}, {&(0x7f00000013c0)=""/53, 0x35}, {&(0x7f0000001400)=""/169, 0xa9}, {&(0x7f00000014c0)=""/164, 0xa4}, {&(0x7f0000001580)=""/224, 0xe0}], 0x7, 0xe, 0x1}, 0x8001)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r6, 0x8000000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r8, 0x4)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x80010, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r7, r10, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68)

13:46:11 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x1802000000000000, 0x0, 0x0)

13:46:11 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb0ff2000000000)

[ 2731.378946] FAULT_INJECTION: forcing a failure.
[ 2731.378946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2731.380053] CPU: 1 PID: 36027 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2731.380675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2731.381411] Call Trace:
[ 2731.381667]  dump_stack+0x107/0x167
[ 2731.382013]  should_fail.cold+0x5/0xa
[ 2731.382385]  _copy_from_user+0x2e/0x1b0
[ 2731.382767]  __copy_msghdr_from_user+0x91/0x4b0
[ 2731.383202]  ? __ia32_sys_shutdown+0x80/0x80
[ 2731.383624]  ? __lockdep_reset_lock+0x180/0x180
[ 2731.384069]  sendmsg_copy_msghdr+0xa1/0x160
[ 2731.384473]  ? do_recvmmsg+0x6d0/0x6d0
[ 2731.384838]  ? lock_chain_count+0x20/0x20
[ 2731.385231]  ? __is_insn_slot_addr+0x123/0x290
[ 2731.385669]  ? lock_downgrade+0x6d0/0x6d0
[ 2731.386070]  ? mark_lock+0xf5/0x2df0
[ 2731.386426]  ? mark_lock+0xf5/0x2df0
[ 2731.386784]  io_sendmsg+0x62c/0x830
[ 2731.387133]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2731.387568]  ? mark_lock+0xf5/0x2df0
[ 2731.387931]  ? lock_chain_count+0x20/0x20
[ 2731.388334]  ? __lock_acquire+0xbb1/0x5b00
[ 2731.388752]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2731.389251]  ? __lock_acquire+0xbb1/0x5b00
[ 2731.389665]  io_issue_sqe+0x3b3/0x77b0
[ 2731.390050]  ? perf_trace_lock+0xac/0x490
[ 2731.390450]  ? io_connect+0x610/0x610
[ 2731.390811]  ? do_raw_spin_lock+0x121/0x260
[ 2731.391223]  ? lock_acquire+0x197/0x470
[ 2731.391597]  ? find_held_lock+0x2c/0x110
[ 2731.391989]  ? __fget_files+0x2cf/0x520
[ 2731.392365]  ? lock_downgrade+0x6d0/0x6d0
[ 2731.392763]  __io_queue_sqe+0x90/0x9d0
[ 2731.393134]  ? perf_trace_io_uring_register+0x500/0x500
[ 2731.393635]  ? io_issue_sqe+0x77b0/0x77b0
[ 2731.394041]  ? __fget_files+0x2f8/0x520
[ 2731.394432]  io_submit_sqes+0x44aa/0x8610
[ 2731.394852]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2731.395320]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2731.395778]  ? lock_downgrade+0x6d0/0x6d0
[ 2731.396165]  ? find_held_lock+0x2c/0x110
[ 2731.396554]  ? io_submit_sqes+0x8610/0x8610
[ 2731.396973]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2731.397432]  ? wait_for_completion_io+0x270/0x270
[ 2731.397900]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2731.398342]  ? vfs_write+0x354/0xb10
[ 2731.398696]  ? fput_many+0x2f/0x1a0
[ 2731.399043]  ? ksys_write+0x1a9/0x260
[ 2731.399403]  ? __ia32_sys_read+0xb0/0xb0
[ 2731.399791]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2731.400280]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2731.400766]  do_syscall_64+0x33/0x40
[ 2731.401118]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2731.401595] RIP: 0033:0x7f2774755b19
[ 2731.401960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2731.403632] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2731.404338] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2731.404993] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2731.405659] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2731.406327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2731.406986] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:46:11 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5)
close(r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
signalfd4(r6, &(0x7f0000000080)={[0x2]}, 0x8, 0x800)

13:46:11 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:11 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

13:46:11 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff1f00000000)

13:46:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69)

[ 2731.723222] FAULT_INJECTION: forcing a failure.
[ 2731.723222] name failslab, interval 1, probability 0, space 0, times 0
[ 2731.724420] CPU: 0 PID: 36385 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2731.725109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2731.725940] Call Trace:
[ 2731.726218]  dump_stack+0x107/0x167
[ 2731.726586]  should_fail.cold+0x5/0xa
[ 2731.726976]  should_failslab+0x5/0x20
[ 2731.727370]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2731.727822]  io_submit_sqes+0x6fe6/0x8610
[ 2731.728269]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2731.728769]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2731.729257]  ? lock_downgrade+0x6d0/0x6d0
[ 2731.729683]  ? find_held_lock+0x2c/0x110
[ 2731.730104]  ? io_submit_sqes+0x8610/0x8610
[ 2731.730552]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2731.731034]  ? wait_for_completion_io+0x270/0x270
[ 2731.731532]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2731.732000]  ? vfs_write+0x354/0xb10
[ 2731.732377]  ? fput_many+0x2f/0x1a0
[ 2731.732747]  ? ksys_write+0x1a9/0x260
[ 2731.733134]  ? __ia32_sys_read+0xb0/0xb0
[ 2731.733545]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2731.734100]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2731.734626]  do_syscall_64+0x33/0x40
[ 2731.735005]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2731.735512] RIP: 0033:0x7f2774755b19
[ 2731.735891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2731.737703] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2731.738471] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2731.739184] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2731.739905] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2731.740618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2731.741316] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:46:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x4002000000000000, 0x0, 0x0)

13:46:27 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:27 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:46:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xe0ffffff00000000, 0x0, 0x0)

13:46:27 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45b42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x20000010}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:27 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = dup2(r3, r3)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
dup3(r5, r6, 0x80000)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0xffffffffffffffff, r7, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001600)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000001700)=0xe8)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xe57, 0x4, &(0x7f0000001580)=[{&(0x7f0000000340)="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", 0x1000, 0x100000000}, {&(0x7f0000001340)="2ffceae0a172a4abb70c6641f1c79612cbf426f0d0f93bbd589503cf806dfbea4f072d6662dcaf1efb3b5e3e54b77b98aff67feff003eb41abf88bb61aafd45afe2550aca0d137f27278d09182b4ebfc662ed67205cc56c8838b39ec627214462da9363c6747d7b7548f4d645b4de06b7ff010936bce2a77ed20fc8e45707f16ad5b9030616d152c1e6064952c7417a5e93ac3268055f07ed4037894641840c039004b68532a0c0fddac", 0xaa, 0x5}, {&(0x7f0000001400)="49c720704e8b0a76b744f7ed108874df0853697a681f9dd72e4d764b240095c4b752550a60d2e27b7030608e7d75c894769e20dcfef9b42b1a32463e61a5e55dc2cbdac2b5a54c5af9aa297f8d217630d0413f2e3de4e20bd36c221dff506264924b45177ab34cd8d3d4c7a9ee465fba4a35142d526afd97078cb74a3430389f51a00ede16a83c09e0c1e790234905d00cc3aa4fb21cac6ea7c2c1a50f80512c83ecad6342457ea382cb2de52a889eed517e2d948c0daab9ff679ec7ee757d16d5825f074c497ed39c2a5bd2e867604449aeb9f48684ce34987385a4edc9387f9d615df8224122786ee1c0b0f9ea", 0xee, 0x8}, {&(0x7f0000001500)="adb1a9f9a35c92cd1208d82ef1df4949aa8d02c4503131ad177c5184c7a448bffeefefdcc73d2410516626c918c76b38c26ab0972cd0705fb0caaefb7dd0aeafeee66a73549c4837c8fd84785f4321daf4b76203445000c721dce54166e748b9fcd369dfaff557925e", 0x69, 0x2}], 0x4000, &(0x7f0000001740)={[{@utf8no}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@subj_type={'subj_type', 0x3d, '!\'{%\'$'}}, {@subj_role={'subj_role', 0x3d, '+7\x00'}}, {@appraise_type}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r5, {0x10000}}, './file0\x00'})
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140))

13:46:27 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:27 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000)

13:46:27 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70)

[ 2747.873264] FAULT_INJECTION: forcing a failure.
[ 2747.873264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2747.874453] CPU: 1 PID: 36489 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2747.875035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2747.875732] Call Trace:
[ 2747.875967]  dump_stack+0x107/0x167
[ 2747.876282]  should_fail.cold+0x5/0xa
[ 2747.876616]  _copy_from_user+0x2e/0x1b0
[ 2747.876962]  __copy_msghdr_from_user+0x91/0x4b0
[ 2747.877360]  ? __ia32_sys_shutdown+0x80/0x80
[ 2747.877738]  ? perf_trace_lock+0xac/0x490
[ 2747.878104]  ? __is_insn_slot_addr+0x123/0x290
[ 2747.878494]  ? lock_downgrade+0x6d0/0x6d0
[ 2747.878849]  ? __lockdep_reset_lock+0x180/0x180
[ 2747.879247]  ? unwind_next_frame+0x13ef/0x1a90
[ 2747.879641]  sendmsg_copy_msghdr+0xa1/0x160
[ 2747.880009]  ? do_recvmmsg+0x6d0/0x6d0
[ 2747.880347]  ? __is_insn_slot_addr+0x123/0x290
[ 2747.880738]  ? lock_downgrade+0x6d0/0x6d0
[ 2747.881101]  io_sendmsg+0x62c/0x830
[ 2747.881415]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2747.881797]  ? __is_insn_slot_addr+0x14c/0x290
[ 2747.882208]  ? lock_chain_count+0x20/0x20
[ 2747.882565]  ? mark_lock+0xf5/0x2df0
[ 2747.882886]  ? register_lock_class+0xbb/0x17b0
[ 2747.883275]  ? arch_stack_walk+0x99/0xf0
[ 2747.883626]  ? lock_chain_count+0x20/0x20
[ 2747.883981]  ? is_dynamic_key+0x1e0/0x1e0
[ 2747.884337]  ? lock_chain_count+0x20/0x20
[ 2747.884699]  ? __lock_acquire+0x1657/0x5b00
[ 2747.885074]  ? __lock_acquire+0xbb1/0x5b00
[ 2747.885438]  io_issue_sqe+0x3b3/0x77b0
[ 2747.885777]  ? perf_trace_lock+0xac/0x490
[ 2747.886188]  ? lock_chain_count+0x20/0x20
[ 2747.886545]  ? io_connect+0x610/0x610
[ 2747.886874]  ? lock_acquire+0x197/0x470
[ 2747.887211]  ? find_held_lock+0x2c/0x110
[ 2747.887563]  ? __fget_files+0x2cf/0x520
[ 2747.887901]  ? lock_downgrade+0x6d0/0x6d0
[ 2747.888257]  __io_queue_sqe+0x90/0x9d0
[ 2747.888592]  ? perf_trace_io_uring_register+0x500/0x500
[ 2747.889044]  ? io_issue_sqe+0x77b0/0x77b0
[ 2747.889393]  ? __fget_files+0x2f8/0x520
[ 2747.889742]  io_submit_sqes+0x44aa/0x8610
[ 2747.890412]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2747.891516]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2747.892582]  ? lock_downgrade+0x6d0/0x6d0
[ 2747.893479]  ? find_held_lock+0x2c/0x110
[ 2747.894115]  ? io_submit_sqes+0x8610/0x8610
[ 2747.894493]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2747.894922]  ? wait_for_completion_io+0x270/0x270
[ 2747.895334]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2747.895728]  ? vfs_write+0x354/0xb10
[ 2747.896045]  ? fput_many+0x2f/0x1a0
[ 2747.896356]  ? ksys_write+0x1a9/0x260
[ 2747.896680]  ? __ia32_sys_read+0xb0/0xb0
[ 2747.897027]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2747.897470]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2747.897947]  do_syscall_64+0x33/0x40
[ 2747.898661]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2747.899576] RIP: 0033:0x7f2774755b19
[ 2747.900234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2747.902701] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2747.903385] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2747.904019] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2747.904645] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2747.905246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2747.905861] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:46:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f00000000, 0x0, 0x0)

13:46:27 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x141}, 0x0, {0x0, r9}}, 0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:28 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:28 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:28 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff0000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:46:28 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = openat$incfs(r3, &(0x7f0000000080)='.log\x00', 0x2a40, 0x100)
inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x1000804)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:28 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71)

13:46:28 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140))
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)

13:46:28 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

[ 2748.245482] FAULT_INJECTION: forcing a failure.
[ 2748.245482] name failslab, interval 1, probability 0, space 0, times 0
[ 2748.246928] CPU: 0 PID: 37114 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2748.247749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2748.248717] Call Trace:
[ 2748.249042]  dump_stack+0x107/0x167
[ 2748.249479]  should_fail.cold+0x5/0xa
[ 2748.249945]  ? create_object.isra.0+0x3a/0xa20
[ 2748.250473]  should_failslab+0x5/0x20
[ 2748.250919]  kmem_cache_alloc+0x5b/0x310
[ 2748.251400]  ? mark_held_locks+0x9e/0xe0
[ 2748.251879]  create_object.isra.0+0x3a/0xa20
[ 2748.252404]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2748.253007]  kmem_cache_alloc_bulk+0x168/0x320
[ 2748.253558]  io_submit_sqes+0x6fe6/0x8610
[ 2748.254093]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2748.254687]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2748.255262]  ? lock_downgrade+0x6d0/0x6d0
[ 2748.255746]  ? find_held_lock+0x2c/0x110
[ 2748.256231]  ? io_submit_sqes+0x8610/0x8610
[ 2748.256733]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2748.257232]  ? wait_for_completion_io+0x270/0x270
[ 2748.257722]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2748.258207]  ? vfs_write+0x354/0xb10
[ 2748.258590]  ? fput_many+0x2f/0x1a0
[ 2748.258964]  ? ksys_write+0x1a9/0x260
[ 2748.259342]  ? __ia32_sys_read+0xb0/0xb0
[ 2748.259741]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2748.260250]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2748.260767]  do_syscall_64+0x33/0x40
[ 2748.261143]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2748.261648] RIP: 0033:0x7f2774755b19
[ 2748.262035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2748.263818] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2748.264562] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2748.265270] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2748.265984] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2748.266686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2748.267492] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:46:43 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:43 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffffff8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:46:43 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72)

13:46:43 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffff600000)

13:46:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4)

13:46:43 executing program 7:
r0 = fork()
ptrace(0x10, r0)
ptrace$setsig(0x15, r0, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:43 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x6f11, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x800, 0x240}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x5, 0x608d, {0x0, r3}, 0x33e, 0x2, 0x0, {0x0, 0x0, r4}}, 0x2)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0)
close(r5)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:43 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2763.925943] FAULT_INJECTION: forcing a failure.
[ 2763.925943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2763.927166] CPU: 1 PID: 37224 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2763.927789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2763.928542] Call Trace:
[ 2763.928795]  dump_stack+0x107/0x167
[ 2763.929152]  should_fail.cold+0x5/0xa
[ 2763.929516]  _copy_from_user+0x2e/0x1b0
[ 2763.929897]  __copy_msghdr_from_user+0x91/0x4b0
[ 2763.930370]  ? __ia32_sys_shutdown+0x80/0x80
[ 2763.930791]  ? __lockdep_reset_lock+0x180/0x180
[ 2763.931245]  ? unwind_next_frame+0x13ef/0x1a90
[ 2763.931676]  sendmsg_copy_msghdr+0xa1/0x160
[ 2763.932094]  ? do_recvmmsg+0x6d0/0x6d0
[ 2763.932468]  ? __is_insn_slot_addr+0x123/0x290
[ 2763.932900]  ? mark_lock+0xf5/0x2df0
[ 2763.933269]  ? mark_lock+0xf5/0x2df0
[ 2763.933623]  io_sendmsg+0x62c/0x830
[ 2763.933968]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2763.934422]  ? __is_insn_slot_addr+0x14c/0x290
[ 2763.934847]  ? lock_chain_count+0x20/0x20
[ 2763.935255]  ? mark_lock+0xf5/0x2df0
[ 2763.935608]  ? register_lock_class+0xbb/0x17b0
[ 2763.936038]  ? arch_stack_walk+0x99/0xf0
[ 2763.936442]  ? lock_chain_count+0x20/0x20
[ 2763.936841]  ? __lock_acquire+0xbb1/0x5b00
[ 2763.937255]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2763.937764]  ? __lock_acquire+0xbb1/0x5b00
[ 2763.938182]  io_issue_sqe+0x3b3/0x77b0
[ 2763.938573]  ? perf_trace_lock+0xac/0x490
[ 2763.938972]  ? io_connect+0x610/0x610
[ 2763.939331]  ? do_raw_spin_lock+0x121/0x260
[ 2763.939754]  ? lock_acquire+0x197/0x470
[ 2763.940127]  ? find_held_lock+0x2c/0x110
[ 2763.940514]  ? __fget_files+0x2cf/0x520
[ 2763.940906]  ? lock_downgrade+0x6d0/0x6d0
[ 2763.941301]  __io_queue_sqe+0x90/0x9d0
[ 2763.941688]  ? perf_trace_io_uring_register+0x500/0x500
[ 2763.942192]  ? io_issue_sqe+0x77b0/0x77b0
[ 2763.942580]  ? __fget_files+0x2f8/0x520
[ 2763.942983]  io_submit_sqes+0x44aa/0x8610
[ 2763.943398]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2763.943882]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2763.944337]  ? lock_downgrade+0x6d0/0x6d0
[ 2763.944725]  ? find_held_lock+0x2c/0x110
[ 2763.945127]  ? io_submit_sqes+0x8610/0x8610
[ 2763.945540]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2763.946009]  ? wait_for_completion_io+0x270/0x270
[ 2763.946469]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2763.946897]  ? vfs_write+0x354/0xb10
[ 2763.947258]  ? fput_many+0x2f/0x1a0
[ 2763.947598]  ? ksys_write+0x1a9/0x260
[ 2763.947947]  ? __ia32_sys_read+0xb0/0xb0
[ 2763.948332]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2763.948815]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2763.949293]  do_syscall_64+0x33/0x40
[ 2763.949629]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2763.950080] RIP: 0033:0x7f2774755b19
[ 2763.950466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2763.952114] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2763.952821] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 2763.953483] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2763.954138] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2763.954799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2763.955458] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:46:44 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r8, 0x4)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r8, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r6, r10, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xfd, 0x0, &(0x7f0000000080)="3b9d4559bcc4189baff9e29d9a3a74888c3dabbdbed28c155fa9745eda2e2ce3a2bf2798781e2f3f6f8bcba6a655536d776b452b83eef8294d0a2c0b3862aa6d0a1a69b9631580ff67de7f26d17304aae5b1d2c5b3308b24c9c5f62273be58b169f14f168f37c6db1b7ba0ae35be1ba617d87b", 0x3, 0x0, 0x0, {0x3}}, 0x20)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:44 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:46:44 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:44 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x410802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = accept4(r3, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80, 0x80800)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000200)=0x2, 0x4)
io_uring_enter(0xffffffffffffffff, 0x52e9, 0xcf69, 0x0, &(0x7f0000000280)={[0x2]}, 0x8)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:44 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x7}, 0x1)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:46:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa)

13:46:44 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x900000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:46:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73)

13:46:44 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_setup(0x256c, &(0x7f0000000080)={0x0, 0x449a, 0x10, 0x0, 0x1fe, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r6=>0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x7ffd)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2764.262879] FAULT_INJECTION: forcing a failure.
[ 2764.262879] name failslab, interval 1, probability 0, space 0, times 0
[ 2764.264133] CPU: 1 PID: 37620 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2764.264791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2764.265537] Call Trace:
[ 2764.265813]  dump_stack+0x107/0x167
[ 2764.266169]  should_fail.cold+0x5/0xa
[ 2764.266534]  ? create_object.isra.0+0x3a/0xa20
[ 2764.266981]  should_failslab+0x5/0x20
[ 2764.267341]  kmem_cache_alloc+0x5b/0x310
[ 2764.267725]  ? mark_held_locks+0x9e/0xe0
[ 2764.268125]  create_object.isra.0+0x3a/0xa20
[ 2764.268533]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2764.269024]  kmem_cache_alloc_bulk+0x168/0x320
[ 2764.269460]  io_submit_sqes+0x6fe6/0x8610
[ 2764.269883]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2764.270391]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2764.270843]  ? lock_downgrade+0x6d0/0x6d0
[ 2764.271241]  ? find_held_lock+0x2c/0x110
[ 2764.271635]  ? io_submit_sqes+0x8610/0x8610
[ 2764.272064]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2764.272524]  ? wait_for_completion_io+0x270/0x270
[ 2764.272979]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2764.273426]  ? vfs_write+0x354/0xb10
[ 2764.273783]  ? fput_many+0x2f/0x1a0
[ 2764.274150]  ? ksys_write+0x1a9/0x260
[ 2764.274526]  ? __ia32_sys_read+0xb0/0xb0
[ 2764.274913]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2764.275416]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2764.275896]  do_syscall_64+0x33/0x40
[ 2764.276262]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2764.276736] RIP: 0033:0x7f2774755b19
[ 2764.277091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2764.278796] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2764.279495] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2764.280143] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2764.280825] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2764.281477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2764.282166] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:46:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x218)

13:46:44 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x6113}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
syz_io_uring_setup(0x7220, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf, 0x0, {0x0, r8}}, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:01 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001800)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/109, 0x6d}], 0x3, &(0x7f0000001380)=""/143, 0x8f}, 0x1}, {{&(0x7f0000001440)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000014c0)=""/159, 0x9f}, {&(0x7f0000001580)=""/1, 0x1}, {&(0x7f00000015c0)=""/190, 0xbe}, {&(0x7f0000001680)=""/179, 0xb3}, {&(0x7f0000001740)=""/53, 0x35}], 0x5}, 0x4}], 0x2, 0x100, &(0x7f0000001880)={0x77359400})

13:47:01 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:47:01 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x240)

13:47:01 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:01 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:01 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74)

13:47:01 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x4)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)}, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3}, 0xffffffff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x43ff}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0)
close(r10)
r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r11, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2781.955252] FAULT_INJECTION: forcing a failure.
[ 2781.955252] name failslab, interval 1, probability 0, space 0, times 0
[ 2781.956477] CPU: 0 PID: 37834 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2781.957138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2781.957916] Call Trace:
[ 2781.958184]  dump_stack+0x107/0x167
[ 2781.958559]  should_fail.cold+0x5/0xa
[ 2781.958932]  ? create_object.isra.0+0x3a/0xa20
[ 2781.959376]  should_failslab+0x5/0x20
[ 2781.959743]  kmem_cache_alloc+0x5b/0x310
[ 2781.960137]  ? mark_held_locks+0x9e/0xe0
[ 2781.960531]  create_object.isra.0+0x3a/0xa20
[ 2781.960949]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2781.961436]  kmem_cache_alloc_bulk+0x168/0x320
[ 2781.961887]  io_submit_sqes+0x6fe6/0x8610
[ 2781.962315]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2781.963431]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2781.963898]  ? lock_downgrade+0x6d0/0x6d0
[ 2781.964295]  ? find_held_lock+0x2c/0x110
[ 2781.964689]  ? io_submit_sqes+0x8610/0x8610
[ 2781.965112]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2781.965581]  ? wait_for_completion_io+0x270/0x270
[ 2781.966043]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2781.966502]  ? vfs_write+0x354/0xb10
[ 2781.966858]  ? fput_many+0x2f/0x1a0
[ 2781.967211]  ? ksys_write+0x1a9/0x260
[ 2781.967579]  ? __ia32_sys_read+0xb0/0xb0
[ 2781.967970]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2781.968468]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2781.968957]  do_syscall_64+0x33/0x40
[ 2781.969315]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2781.969796] RIP: 0033:0x7f2774755b19
[ 2781.970154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2781.971923] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2781.972636] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2781.973302] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2781.973966] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2781.974679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2781.975345] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:47:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x121101, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r4, 0x8000000)
close(r3)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xac1, 0xd0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_setup(0xfb5, &(0x7f0000000140)={0x0, 0xc466, 0x4, 0x0, 0x360, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))

13:47:02 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
fremovexattr(r0, &(0x7f0000000400)=@random={'osx.', '-\x00'})
syz_io_uring_submit(r4, r7, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd=r3, 0x7, &(0x7f0000000280)=[{&(0x7f0000000040)="175faf6c15fdf6a61e8d59ce8f252ee49df8334c1d7ba0e49d41a54a60a259cd6ba50a39985e52be90ae6a75313f150bdb5f2db5b9d0aae7c3eead400138cbc87beede142bfc046e27a3403d27350d1d9506a51aa35bc9a9cf429364c85d4c6cb7a97018bbf75f901c85092042c7402f300f9d3e6501c07e4dc0bc9f40dcd7dbbbd9bc6b3a0bbaeec5c8545bf4ae5b8cab1712741b68b5b83dba0ffdf4b1", 0x9e}, {&(0x7f0000000200)="47e1e6483ea9dc3ea7cc29a4c3638cb00508104a3ef3c865e7cbd49b3643c2f76455fa74fbd7cecbd86fb22b489abe87ee816ac80a050547b44b0b3dbd1adcf0420290409ab5af73d3e3d7c83b59a3d552f11dc28a5963e28679ae7ef33e4c30e59aca5815bfdece350353f6d8879db6fae004bc7a4256913f6f10de", 0x7c}, {&(0x7f0000000300)="88ce0584b56085dde04f16c71ae84932efe083c73011f78b6f2f789f652e5797d23f480989b100a2c69b3b3ad88b61a5bd4e7452c62f7c47e6c7198653391d55a35a0e18b3e56f58d897f6238282f9707e9593cfc8f8bda722ebfeecbb0912578192f4080803426f20d58f1302a46a8b01da15c2a6a04542f018559aa89f27f73a4e837fbee9c3bc92a5fec2", 0x8c}], 0x3, 0x0, 0x1, {0x1}}, 0x7f)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:02 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:02 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa00)

13:47:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75)

13:47:17 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:17 executing program 4:
r0 = syz_io_uring_setup(0x2000322d, &(0x7f0000000180)={0x0, 0x758d, 0x8, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x195b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f3e000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0xfffffffe)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0)
io_uring_enter(r8, 0x58ab, 0xfffffffc, 0x3, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r9, 0x4)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_submit(r5, r11, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000004, 0x10, r0, 0x10000000)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r12, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd_index=0x5, 0x1, &(0x7f0000000040)=""/146, 0x92, 0x1, 0x0, {0x0, r13}}, 0x0)

13:47:17 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1802)

13:47:17 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
ptrace(0x10, r1)
ptrace$setsig(0x15, r1, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x8, 0x7, 0x3f, 0x0, 0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x4220, 0xfff, 0x4, 0x1, 0xff, 0x9, 0x5, 0x0, 0x7, 0x0, 0x8}, r1, 0x0, r0, 0xa)
r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
ptrace$cont(0x18, r1, 0x1, 0x1)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:17 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:47:17 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x9}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:17 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2797.764274] FAULT_INJECTION: forcing a failure.
[ 2797.764274] name failslab, interval 1, probability 0, space 0, times 0
[ 2797.767093] CPU: 1 PID: 38383 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2797.768686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2797.770603] Call Trace:
[ 2797.771211]  dump_stack+0x107/0x167
[ 2797.772044]  should_fail.cold+0x5/0xa
[ 2797.772920]  ? create_object.isra.0+0x3a/0xa20
[ 2797.773965]  should_failslab+0x5/0x20
[ 2797.774848]  kmem_cache_alloc+0x5b/0x310
[ 2797.775778]  ? mark_held_locks+0x9e/0xe0
[ 2797.776709]  create_object.isra.0+0x3a/0xa20
[ 2797.777726]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2797.778909]  kmem_cache_alloc_bulk+0x168/0x320
[ 2797.779959]  io_submit_sqes+0x6fe6/0x8610
[ 2797.780939]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2797.782079]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2797.783201]  ? lock_downgrade+0x6d0/0x6d0
[ 2797.784146]  ? find_held_lock+0x2c/0x110
[ 2797.785077]  ? io_submit_sqes+0x8610/0x8610
[ 2797.786076]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2797.787201]  ? wait_for_completion_io+0x270/0x270
[ 2797.788309]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2797.789371]  ? vfs_write+0x354/0xb10
[ 2797.790225]  ? fput_many+0x2f/0x1a0
[ 2797.791075]  ? ksys_write+0x1a9/0x260
[ 2797.791948]  ? __ia32_sys_read+0xb0/0xb0
[ 2797.792879]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2797.794078]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2797.795281]  do_syscall_64+0x33/0x40
[ 2797.796132]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2797.797310] RIP: 0033:0x7f2774755b19
[ 2797.798159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2797.802421] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2797.804174] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 2797.805807] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2797.807454] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2797.809101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2797.810745] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:47:17 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x1, 0x80050, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000000)=0x8000, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2797.826657] 9pnet: Insufficient options for proto=fd
13:47:17 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:17 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

13:47:17 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76)

13:47:17 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000400)=""/222, 0xde}], 0x3, &(0x7f0000000500)=""/120, 0x78}, 0x0, 0x2061, 0x0, {0x2, r8}}, 0x90a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:17 executing program 1:
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x224, r6, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xab, 0xfc, "1c7392a7bc99dbc4d3712c4f6b1383156591f45a5fe5914f7cc2d8eaa40336535381312cb97b8ffde36694a1ce72e0ef8bfe7f42a2952cd8c3a0f4e99a08221ae5c842e78d60ca43b209f7f5af35356e17d3b752c935d7f529b3c52ca44bf27d9ed0e9066aa04c5b9c1334215f707e63d99c00db83c0ba373cd3c4372b58bfca3cb4823be762c9d74fcd13c9f6cb4b8de6a1718404a307811bf4a87c6f423e4962ba91beb245a8"}, @NL80211_ATTR_FILS_ERP_RRK={0xaf, 0xfc, "2de083a8cc1af639a39e7d2e97b183cc2abb1f3731c290fbf841dcfd3062fdfe5d5e29b3130a32c885d880b275d50f0e01580645be6cc426b9ace933c2464f9e0e78975576a37ae5a4025514833348ccd892d62eb1b4ea3c9cd3b5da9f3e8852df7d4a1fe3a5e6e7a001ef5f8934acaca78312de95d9009a3b324fca78e5914875b31722134805a0d76cb811f24139a08629bb7b5ff852c19782e998eeec50b44d1c0ef581305d9163651c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "136cacbd"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "11e87980bc7963ee71353bee5d34"}, @NL80211_ATTR_FILS_ERP_REALM={0x3b, 0xfa, "5cf171d1b7eccf8239e6a95bfe46e5de2cee4dba05ee0f725ef7ea6cb6d26ee3ea63bb4b4aeacfdc554f2ba8a554d0c02d16b5f41c11e3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x4c, 0x2a, [@cf={0x4, 0x6, {0x3, 0xf7, 0x1ff, 0x2}}, @mesh_chsw={0x76, 0x6, {0x40, 0x1, 0x3d, 0x8000}}, @tim={0x5, 0x2e, {0x1, 0xee, 0x7, "db749b433097a3e3e2dd858b53042f94b74c7b75353119e9347148cd39dea2eff04658c9681633e3fb4241"}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x224}, 0x1, 0x0, 0x0, 0xb858953bc5ce28e4}, 0x80)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r8, 0x4)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r8, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index, 0x100, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xc5)

13:47:17 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:47:18 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2798.020528] FAULT_INJECTION: forcing a failure.
[ 2798.020528] name failslab, interval 1, probability 0, space 0, times 0
[ 2798.023282] CPU: 1 PID: 38762 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2798.024884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2798.026828] Call Trace:
[ 2798.027433]  dump_stack+0x107/0x167
[ 2798.028270]  should_fail.cold+0x5/0xa
[ 2798.029139]  ? create_object.isra.0+0x3a/0xa20
[ 2798.030185]  should_failslab+0x5/0x20
[ 2798.031068]  kmem_cache_alloc+0x5b/0x310
[ 2798.032003]  create_object.isra.0+0x3a/0xa20
[ 2798.033014]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2798.034180]  kmem_cache_alloc_bulk+0x168/0x320
[ 2798.035246]  io_submit_sqes+0x6fe6/0x8610
[ 2798.036220]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2798.037358]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2798.038466]  ? lock_downgrade+0x6d0/0x6d0
[ 2798.039421]  ? find_held_lock+0x2c/0x110
[ 2798.040351]  ? io_submit_sqes+0x8610/0x8610
[ 2798.041344]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2798.042451]  ? wait_for_completion_io+0x270/0x270
[ 2798.043568]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2798.044632]  ? vfs_write+0x354/0xb10
[ 2798.045485]  ? fput_many+0x2f/0x1a0
[ 2798.046317]  ? ksys_write+0x1a9/0x260
[ 2798.047199]  ? __ia32_sys_read+0xb0/0xb0
[ 2798.048129]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2798.049329]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2798.050510]  do_syscall_64+0x33/0x40
[ 2798.051374]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2798.052552] RIP: 0033:0x7f2774755b19
[ 2798.053399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2798.057649] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2798.059401] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2798.061037] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2798.062686] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2798.064318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2798.065957] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:47:18 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4002)

[ 2798.104970] 9pnet: Insufficient options for proto=fd
13:47:35 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000)

13:47:35 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:47:35 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:35 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x20, 0x2, 0x1f, 0x8, 0x0, 0x1d9, 0x40400, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8021, 0xffffffff, 0x6, 0x2, 0x5, 0x9, 0x14bb, 0x0, 0x80000001, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:35 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, <r5=>0x0, "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", "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"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0x318, &(0x7f00000024c0)={0x0, 0x59f6, 0x10, 0x2, 0xd1, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000023c0), &(0x7f0000002400)=<r6=>0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002340)=ANY=[@ANYBLOB="010000000100000018000000e8cfa7e5bfd8e0aa0e531d0653a95142d325351f2f959e8735885fd91c66b903c7505e7bf36b95715b8ca1ee6561deece3b86589977fe471bb", @ANYRES32=<r7=>r0, @ANYBLOB])
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000002480)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, r7, 0x0, r8, 0x2, 0x0, 0x1, {0x0, r9}}, 0x2693)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r10, &(0x7f00000007c0)=""/180, 0xb4)
syz_io_uring_setup(0x1f84, &(0x7f0000000200)={0x0, 0xf176, 0x10, 0x1, 0xb2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000002300))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001300)={0x0, r5, "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", "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"})
r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:35 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000000c0)={0x100, 0x0, &(0x7f0000000080)=[r0, 0xffffffffffffffff]}, 0x2)
r4 = signalfd4(r0, &(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8, 0x80800)
ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0xf9c, 0x13, &(0x7f0000000280)="15e7460334ebe28cd1293cb718597c16a305f4", 0x1}, {0xff, 0x32, &(0x7f0000000340)="b16ae62d805d1ac30d90f7400edde189e3216b697be01e2a1387da5ed69e027853b74ba153428fb56af9d3c719500a6cf5fb", 0x1}]})
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0x2, 0x3, 0x3f, 0x5, 0x1a, 0x1, {0x0, r6}}, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x3}, 0x2)

13:47:35 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77)

[ 2815.752761] FAULT_INJECTION: forcing a failure.
[ 2815.752761] name failslab, interval 1, probability 0, space 0, times 0
[ 2815.753786] CPU: 1 PID: 39078 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2815.754371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2815.755089] Call Trace:
[ 2815.755326]  dump_stack+0x107/0x167
[ 2815.755642]  should_fail.cold+0x5/0xa
[ 2815.755974]  ? create_object.isra.0+0x3a/0xa20
[ 2815.756368]  should_failslab+0x5/0x20
[ 2815.756698]  kmem_cache_alloc+0x5b/0x310
[ 2815.757048]  ? mark_held_locks+0x9e/0xe0
[ 2815.757406]  create_object.isra.0+0x3a/0xa20
[ 2815.757784]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2815.758223]  kmem_cache_alloc_bulk+0x168/0x320
[ 2815.758621]  io_submit_sqes+0x6fe6/0x8610
[ 2815.767059]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2815.767525]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2815.767995]  ? lock_downgrade+0x6d0/0x6d0
[ 2815.768378]  ? find_held_lock+0x2c/0x110
[ 2815.768729]  ? io_submit_sqes+0x8610/0x8610
[ 2815.769104]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2815.769517]  ? wait_for_completion_io+0x270/0x270
[ 2815.769930]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2815.770329]  ? vfs_write+0x354/0xb10
[ 2815.770647]  ? fput_many+0x2f/0x1a0
[ 2815.770971]  ? ksys_write+0x1a9/0x260
[ 2815.771295]  ? __ia32_sys_read+0xb0/0xb0
[ 2815.771645]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2815.772090]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2815.772532]  do_syscall_64+0x33/0x40
[ 2815.772848]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2815.773280] RIP: 0033:0x7f2774755b19
[ 2815.773596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2815.775185] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2815.775928] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2815.776608] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2815.777286] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2815.777960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2815.778630] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
[ 2815.780710] 9pnet: Insufficient options for proto=fd
13:47:35 executing program 7:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x2}, 0x5)
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000200)='./file0\x00')
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x9, 0x2, 0x3, 0x7})

13:47:35 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000340)=<r10=>0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r7, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002500)="2ccdd31ac150ccf06391fbc325814b8c62dea38282baf9890e3456d6b5ff6ff2e8438934838bd9fdd133cf2f8e99dc45e08749805507bbd4c2deed0725d183ea40af019b06db4d3dae773ebb7efda9d0da73c6ffddf6ed1fa17ef79d5a22f2d463fe0f3a60b54e84e0a02c0990073e951ac29f19c0d00f7fe69d931768f710e3fe46da5440e2f72269efcef273641ce350d96972714564bbeb62cee75eeb81367af5f828b270f15a316cb88953203cb74f88b572f6b2f8a6dfdac26a5688523d1892843f7d7f8fa9d28a39e727e24c84dd301086ba7e4369c935c3798d1007f60384e41c3b3208f84320261331ca31ba986da22902f4bedec16f260912d1df8fb37b9ac8eef439c8dd5199f5a4e574122f02095f454244fb7d8c37aab5f77a3458b469ca0f8039fb6111fdb496ef8a2c8c2d8c437f7959ca77872b296b888f829b8dab0891c4d32fb6b9e186c1cae83b4ce0815f9e15ee559d7b67a7d4812832e940e7bcbfcff3bc7a8a8b8e84eeef325b0a36a3d4126e40de8e345c4fdf6048686d99fbc64be40c1762c1e57939e2cc5850ab28d53c025a86b3b4c53bbb32ea72eb2b126250e0447e018237c5d250d33bb19c85a4db846897afc21280b0dca866fa04f84c02b9fc21d6b4a75d036045bd2c1fa8d8810b24ff8161a44028d2d0e1da6d2cd669638e611c9e5c0f26ff6d990ccd2c6791c9ae7dba77b8a6ecc179a148b817755707d942cd8abd7c3ba883e0863c2c8e18089277e9bfd9e53a715e4fd41fced643dfa46cca16e28d13c1e4d8901ea78a130d5d252391a64057be4d5996bb5db5e5bc415d72e52d5860e47f5e97a621297ee6857ada236cf3c5a814091ffa43b06a0651e6993f8d29200e8b108cc26977b95801f0d160408df3e1d875e43fba2fad0f3f74adbec2f62b2440d0b2eeef03821fa7ea0469e7b7fc23227c5aebb2032379b1d1c46f33c2e58b0c5d38ea0809507081c3769fdd59b7a7b4d14becfc3bf55f6509c4b85319bf45f66a0614c5c95c82a099b4ed1d9f6de65e8b98815f8acfa37414ce74d4095c0c22a94a4dde713b244ff13004fd48915d7a639134809d59ecfb1b3644cbd9e2a4110256baaec96efee6b30537e045cf78c01565c5b9ab1ec1db1cb1d0e6bb31bf4f8f5f5bda4c1aada8d92f44a4f29509c469bdac5ad9920b517d4c36c271711157bafbc0be5273c37db1847cf7fe37ef98fbf95f94166347c4d713d0c75267d7d716137f3f85f56583de1e44f484a454663f7a56d2e9b1b4b912ee85f62f17206d050227bf33887887c79fd7294b85adc0ce7bbb7fb3d6b2d660cc8a2ab19f387003fdba89c7f279172d396c43b5ea17754d44f5a9d7fc0cea0b4e0423cb49ea03be08eec00fa9353df33d2008327908ae630401db10ae6899025b9a6757813a3eaf36c0569c8d292a28c993af903b477e0dd45caf2f5180a3507467cad09964992cff17db5b22c284abde49c57bb58b0b0c074f07b1836a1fbd68ac95e3a61436ed340d9d3bb742c15c7d55110f8e02a02afc8b3244b0a80ec5788c54caf102a2d137ea14eba340890cf505dcaf33ebb29f73123516594c064b3b41f932a6bbd01e3726edad1ef5bead97edb502c3c626ac36e155826499d14ef500d10845882df75e21e0e5f70edadca495c64eee647903c15fdda4f0cad5faaccc2f8a2f050c58749de4fe9a5c2cb083387def5ab3428ffe406af3ce4360b06cc69563c376270110ae6c622ffefcbc6c8e9216ac215fe7fdc21d6e1fe9a9ebb2ff163456bad86052f3045d2f55539d6b4252647ba4b6989ae9c47a163efbef98fc55951c48a4b7f7dd65ffa0d34319ef51c182774d36e418fc53d0bb87cb4864316284c1abf61220cc1963332304d4ab854b02c904a0ce6e94976cdf2c578fd0525f6e1bb0abeb77dbfd6d69ff9a3eca75d5e5286c663406b7876ed89f5bbf51c0debf5445ed095a21dca31440000b831b87c8ab67d035e3f1d10c6ff9126f7e7da9e7c213558608112e70300d73019399f266110af1eaa4b8fb72f0498b261366063760451f75c380b150676d7b5a76a3ca6779c80005b709b348465f3340804b8ae5c732ca550e3dc55f5952227ef4604a39b82ab5a257e2971d17e911eb4163bdaa361a27610fbcf6a6e6a6b049c2db4a9ce11788531cd2a7db0f05b51f2896f4f29ceba8b45224b1b6f32d6b345bdbb240ac9196e8aca1b5620c8bdf911e121d0a6c7b0c3fd2d90cfd06f97b08696c63dc8d700ffa13fcdcc7cccc25606f12dccd3c08b4d78fc53025950955202380e29bb599bd8048270b4fee0c500ea594456e4ac298664be113a9315c4a3a08163c934a6052f45861d25f0e34fd68b718ff2ddde2540542812c894e30558fc58f8d37e9623d52123a55df183ed3eb8ee764e469b4dc28d4b9a49fb37955802bf0163a2213e59287f9960b9d6eb9b69c70d671224ae6382ba5b6d13d040cca2d364d4eabeede013664c02af92aa0177ec66990c2e62113c338c88f2bf1c6b58007b2ac0eb01de9c1ec60e670bca15c15f1657aa1ee6ffdf000d141373cb63958a6864fa5de7aa6f4bd187ff953ded7faf03f75b6d492a6961903e56009474c20b029c92bcb620a01f0472be6b0e42d087fa0ba9765d161ed18590c1c206a91a2c2765872f3a04ec0533f466391f8ed1d7915fee45951b55dae26ac2231253f5f6716bdbc81a6b1639eb2cf31fda4ae6b6b9bfe3e417272c071c406821309a8ee031bc8317eb1c29adaed0cb6a5c025e225fda8e8954eb52e0fa8bedeb37c9e6163cd8c51cfe8e2e05c277c3e0e39a6400ab06a7f101c3fb4649dab4b9d793cd2233881d9f380c929fdb126cb4f748b48d71d0f620174e71265d4f0386c2c33b0712d7a9bb4d1c5ccbfabb8d8b718da1b873f12f12e25e169733dc854eb161800e059df42a2f32707a44917a06b7c3784e38c4d81703489e4ba1d71d11bd2d338452af8a06c76ea882e371bce71f489afde5a60e3532d72c6f7962dd296f9a609531c82d120b9ed3394f46912d13f932797b413431aa7f37371093374cec554c9cfb9c1907a42fd561210333701c344527c718338c8c0798a6f9bb8c8ac060d1acf47286e4e3b856f9d3891d3a87379bbcbd158d0e6554088caff83150bc6e3a6c4c0b242a51596dc395e96cb2fc12232a6d1174fe93634c3f40559d8894942bc7d9dfacad10574a187c3abdf48063155d15016642df9c34b5687005621df3a1bd50e07729f5387216844ed2f0b58ba1b1456962f77dda67e705e5e322d3744ca32c16225d7c1addb007edb360da2b288d6517b2a29da1fcdbe75861cad35aa6dd232383c60716beda5e5169c72335199a1d5ecdec2803a2350bd630c95267491618a6910013cef5f27de07ea73f30f986fcebe70411daaee05d62ba5c80b9839ade659f1bec19cb08bf1038652a6bf45094570952220d9175af7703c7f4ee3f47b469d4f9bd2c269d29a8269acda0e8dbb89de8d3fb0299ec9a955b13d39163b3123444c71341694c71163140ef8e35dbbc3a40c935a734403e581c8f16e218949648d99f59b99d375c336567d37b4ad587bdc3c3c44c6e6668d46bee9f1f4357199829415f0939d38623da61647c15f187df69cc0548196c92723a0aba9b91de8a1a766185abd02a6ec9c6d6cd4784e7a9c41734116751178abca79b04a74d6c1582a6faaf3041d7fe441d691387d818be29439b04783d0c2951d83c8a6e3c3c61c71a0b0884cf9ce09961a246f42fcd0747c9736e3a6629df032f3008bf3eff14f11606468254e371c779622008f7ba556cefcc21f5925df046f01e6dd0c0da9084e75c6e23008fdc14edb2af07c0e99ba00006c186253e462aa3d5bfe472de3be9232bb27f1d160adef44665ef364a8889dfa8532d963c2b3167c531f4f91b18655361d838b35c19dfacd9c55596f25086f2e8be35c8a5283f580e92a77c2b3631ff760ee3262acc006ca6a68ea56785e9dbc78486cfaed8620cbbf9cb25730bbf55ff25261cddc60ef00f0919d4d1db10700c525b6ae91f5eb75671378b6b7fcd5248b137fe2a04526d7bc58686e3e5ba57f3a62b5cb5352909354338d3768ec14afc529db83c1f8195d4ce97e5607bc572c3cc352683974be33995358e4bea6e178273f95b314c9406d7a3a3b8435e3c4be3824cccc6d61adfe38c83b91354a3be4993452aabe80da5ce0a85d4630fac6b2815b08a5995f4cb7ec2b2d6c6dc19807eadf0b72ec543068ad9c1cf11be894bed88432890b0e94493625208f153379a181d7d899a8cbf88712763f28a80b7dc5729cd16e293ce4981c38281bd9f7a2f19738be6b180d0cd40e29daa1617c0d74a89e28489ddee34a16db9d00eb406f00d187415157a84ac5d853f7259c33a07628e3c1825726c47c9ae62c362093753e57425d6a5ce970c8b1a3583e9d1d891ce37405741711dfa86cd249fb0b77bee22551a9772b6cd0873015880ece3213384f70d395a1aa99c1c464433b58ada8f499a897cab6b411ffa6db6acdf63751acf1d88a0a89d5216bdd252d3fa1b4c80594c95d494df9434237e80fbf61f7e0596762da366d859d4cfd9030a93ffe035ccda6ca4ba16ad3c84f230fd4cf0bb1cafbeb6bff61dea342c91105413f53050b55fa84c205d10afc135c6dc6e6e3303bc0dbfcb79e17ccde641e84e831f78044a8a3a4cf3077180e899946c1d5d9f80f0afa8ca2cdc24a68d25557be5ff3afc99c996f88f68c234aa90a404588883bf433aaea04036e259ee427e4a8acf169bdfab319822052f361d2f355523e90c20021b3cdafee52695af229660ba2bc15ea0b15d6b1341ddc4a115629c25aa933372b924c97fe4c389024e36db8cac492058ab13eb0f590ab8a5261b161ed60ae6d1a505728bfa22978121e9222cacb5cdcbf71ba2a4fb0addec345936b9b463402684a95b19cde8d9875c52078ab76a7a58243e59c2e87e3e9357be63765972b40201f0f04c05f9d6d1ca708cd7ab183d90a909e80c8a24b1e7c04963b2504113d3022c6f224b3cf42c54eeea21022c8ca701285bb387873ad87c165b4e3f7aa02a0b0483d2e7c2f0539b705b4836de1e2ef166d78f6fe2af805ef4673a7f4b2884dce237b978ad55a70ca995679012abdcc0b4492cffbf6371424508db42ab7dc59cb2242be04ea0f9afb0f2e4ae1825a39df1fe5bdfb267884cdcac788b031bd88335e73901868f226ae571402c9aa04be6de2a43f481110e31b0809ec6a3abae94b3495d6ba0d45707f97d2f5639f05b077bbb412306adb1c6a5d304054e83f50c4e5d13c2f5819b10d419fe359295a5412c1c11e6d65bdaefdd3efaabeaef71656d88747c849a74d79b73fe50e8bc5e9b8e9c5b8d15f43498675fe05cc5d75b1949a2855ea0e2943aa4437efed09a6078d6b14eb68f5072bd40e509af17b2f2c4b49f340d6c5703db76ba4b3e65377a86bfceaa802457e29488bd4bf3438dccd5a15ce569a40f30a0a3186c6ac000882d191294ca287e9b7dd90803aaa3dea98c9c3e2aa9cda5a56990d8185346e5f7ffe9a52bad71274a8e0bce50842f08d55c682eda80763f9cddb8c29bb3879ce57f8bb5400b46312fc67f4df9d3ebeddafa971e51364e6f538c8c4b5fb5628356d02cd54e8ca1ce039c6d1d662b763c0b97d27a9067c8a5d04827600ec553ef35527761aef197a6a6fdacf9b48169154eca1a9bf0d56fd89a01bb69eb33cc438a85406ce18f2529c08ffdba59f947ca51541e1a968e2497262dba93fc729ff9b58b6cc138d040a202b71e3669032fbf404a08936adcb70dbaf48e835ea08119d72546edf199001ed8309df4979f36079b36a0696b7e5d920345b597a4f76d20a475a", 0x1040, 0x2400c814, 0x3, {0x0, r11}}, 0x1)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r11}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:35 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:35 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:35 executing program 4:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x8001, 0xffffffffffff6b68)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x3a72, &(0x7f0000000240)={0x0, 0xfffffffd, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r12}}, 0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x19, 0x0, {0x0, r12}}, 0x4)

13:47:35 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:47:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78)

13:47:35 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

[ 2815.996805] 9pnet: Insufficient options for proto=fd
[ 2816.004389] FAULT_INJECTION: forcing a failure.
[ 2816.004389] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2816.007299] CPU: 1 PID: 39421 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2816.008934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.010904] Call Trace:
[ 2816.011531]  dump_stack+0x107/0x167
[ 2816.012387]  should_fail.cold+0x5/0xa
[ 2816.013288]  _copy_from_user+0x2e/0x1b0
[ 2816.014228]  __copy_msghdr_from_user+0x91/0x4b0
[ 2816.015336]  ? __ia32_sys_shutdown+0x80/0x80
[ 2816.016382]  ? __lockdep_reset_lock+0x180/0x180
[ 2816.017486]  sendmsg_copy_msghdr+0xa1/0x160
[ 2816.018493]  ? do_recvmmsg+0x6d0/0x6d0
[ 2816.019407]  ? lock_chain_count+0x20/0x20
[ 2816.020390]  ? __is_insn_slot_addr+0x123/0x290
[ 2816.021451]  ? lock_downgrade+0x6d0/0x6d0
[ 2816.022420]  ? unwind_next_frame+0x13ef/0x1a90
[ 2816.023497]  io_sendmsg+0x62c/0x830
[ 2816.024353]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2816.025401]  ? mark_lock+0xf5/0x2df0
[ 2816.026271]  ? lock_chain_count+0x20/0x20
[ 2816.027257]  ? lock_chain_count+0x20/0x20
[ 2816.028229]  ? stack_trace_save+0x8c/0xc0
[ 2816.029196]  ? __lockdep_reset_lock+0x180/0x180
[ 2816.030285]  ? lock_acquire+0x197/0x470
[ 2816.031236]  ? __lock_acquire+0xbb1/0x5b00
[ 2816.032225]  io_issue_sqe+0x3b3/0x77b0
[ 2816.033143]  ? perf_trace_lock+0xac/0x490
[ 2816.034105]  ? lock_chain_count+0x20/0x20
[ 2816.035087]  ? io_connect+0x610/0x610
[ 2816.035982]  ? lock_acquire+0x197/0x470
[ 2816.036912]  ? find_held_lock+0x2c/0x110
[ 2816.037859]  ? __fget_files+0x2cf/0x520
[ 2816.038784]  ? lock_downgrade+0x6d0/0x6d0
[ 2816.039773]  __io_queue_sqe+0x90/0x9d0
[ 2816.040696]  ? perf_trace_io_uring_register+0x500/0x500
[ 2816.041939]  ? io_issue_sqe+0x77b0/0x77b0
[ 2816.042941]  ? __fget_files+0x2f8/0x520
[ 2816.043878]  io_submit_sqes+0x44aa/0x8610
[ 2816.044873]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2816.046033]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2816.047174]  ? lock_downgrade+0x6d0/0x6d0
[ 2816.048148]  ? find_held_lock+0x2c/0x110
[ 2816.049098]  ? io_submit_sqes+0x8610/0x8610
[ 2816.050106]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2816.051243]  ? wait_for_completion_io+0x270/0x270
[ 2816.052371]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2816.053452]  ? vfs_write+0x354/0xb10
[ 2816.054317]  ? fput_many+0x2f/0x1a0
[ 2816.055182]  ? ksys_write+0x1a9/0x260
[ 2816.056068]  ? __ia32_sys_read+0xb0/0xb0
[ 2816.057015]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2816.058237]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2816.059454]  do_syscall_64+0x33/0x40
[ 2816.060330]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2816.061526] RIP: 0033:0x7f2774755b19
[ 2816.062390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.066767] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2816.068576] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2816.070267] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2816.071954] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.073621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2816.079056] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:47:36 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa000000)

13:47:51 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:51 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18020000)

13:47:51 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79)

13:47:51 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ftruncate(0xffffffffffffffff, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xfff, 0x1, 0x1}, 0x5)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="0da4004e00", @ANYRES32=<r10=>r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
syz_io_uring_submit(r1, r9, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r10, &(0x7f0000000080)=0x80, &(0x7f0000000200)=@nfc_llcp, 0x0, 0x80000}, 0x5)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:47:51 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x195c, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
creat(&(0x7f0000000140)='./file0\x00', 0x21)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46a2, 0x0)
r6 = dup2(r3, r0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0xffffffffffffffff, r7, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0xa80002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}, {@debug={'debug', 0x3d, 0x3}}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@access_client}, {@cache_none}, {@version_u}, {@fscache}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, 'map_files\x00'}}, {@hash}]}})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x8001)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd, 0x103}, 0xfffffffe)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r9, &(0x7f00000007c0)=""/180, 0xb4)
fchmodat(r9, &(0x7f0000000080)='./file0\x00', 0x0)

[ 2831.280704] FAULT_INJECTION: forcing a failure.
[ 2831.280704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2831.283433] CPU: 1 PID: 39705 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2831.284966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2831.286794] Call Trace:
[ 2831.287389]  dump_stack+0x107/0x167
[ 2831.288200]  should_fail.cold+0x5/0xa
[ 2831.289045]  _copy_from_user+0x2e/0x1b0
[ 2831.289928]  __copy_msghdr_from_user+0x91/0x4b0
[ 2831.290961]  ? __ia32_sys_shutdown+0x80/0x80
[ 2831.291956]  ? __lockdep_reset_lock+0x180/0x180
[ 2831.292988]  sendmsg_copy_msghdr+0xa1/0x160
[ 2831.293932]  ? do_recvmmsg+0x6d0/0x6d0
[ 2831.294779]  ? lock_chain_count+0x20/0x20
[ 2831.295700]  ? __is_insn_slot_addr+0x123/0x290
[ 2831.296709]  ? lock_downgrade+0x6d0/0x6d0
[ 2831.297628]  ? mark_lock+0xf5/0x2df0
[ 2831.298439]  ? mark_lock+0xf5/0x2df0
[ 2831.299274]  io_sendmsg+0x62c/0x830
[ 2831.300076]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2831.301073]  ? mark_lock+0xf5/0x2df0
[ 2831.301903]  ? lock_chain_count+0x20/0x20
[ 2831.302818]  ? __lock_acquire+0xbb1/0x5b00
[ 2831.303778]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2831.304935]  ? __lock_acquire+0xbb1/0x5b00
[ 2831.305868]  io_issue_sqe+0x3b3/0x77b0
[ 2831.306722]  ? perf_trace_lock+0xac/0x490
[ 2831.307651]  ? io_connect+0x610/0x610
[ 2831.308488]  ? do_raw_spin_lock+0x121/0x260
[ 2831.309443]  ? lock_acquire+0x197/0x470
[ 2831.310318]  ? find_held_lock+0x2c/0x110
[ 2831.311235]  ? __fget_files+0x2cf/0x520
[ 2831.312117]  ? lock_downgrade+0x6d0/0x6d0
[ 2831.313036]  __io_queue_sqe+0x90/0x9d0
[ 2831.313899]  ? perf_trace_io_uring_register+0x500/0x500
[ 2831.315074]  ? io_issue_sqe+0x77b0/0x77b0
[ 2831.315989]  ? __fget_files+0x2f8/0x520
[ 2831.316879]  io_submit_sqes+0x44aa/0x8610
[ 2831.317813]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2831.318912]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2831.319986]  ? lock_downgrade+0x6d0/0x6d0
[ 2831.320895]  ? find_held_lock+0x2c/0x110
[ 2831.321787]  ? io_submit_sqes+0x8610/0x8610
13:47:51 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:47:51 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_io_uring_setup(0x6272, &(0x7f0000000040)={0x0, 0x7c2f, 0x8, 0x1, 0x11, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r4=>0x0)
r5 = syz_open_dev$vcsu(&(0x7f0000000240), 0x7, 0x800)
fremovexattr(r3, &(0x7f0000002bc0)=@known='system.sockprotoname\x00')
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x4, 0x0, r5, &(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x209, 0x0, 0x0, {0x0, r6}}, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r8, &(0x7f00000007c0)=""/180, 0xb4)
r9 = fork()
syz_io_uring_submit(0x0, r2, &(0x7f0000002c80)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r8, &(0x7f0000002c00)={0x4000, 0x190, 0x1}, &(0x7f0000002c40)='./file0\x00', 0x18, 0x0, 0x23456}, 0x80)
ptrace(0x10, r9)
ptrace$setsig(0x15, r9, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
getresuid(&(0x7f0000000480), &(0x7f00000004c0)=<r10=>0x0, &(0x7f0000000500))
sendmsg$nl_netfilter(r8, &(0x7f0000002b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b40)={&(0x7f0000000540)=ANY=[@ANYBLOB="d82500001208010828bd7000fbdbdf250c000004d31d7da852bd13e74ceb937eebe04d1e080a52faf65ceb706c8495718ce253357897e9fc30a98c6c42e9d16d39b22dc4f700635a4b0cfba54d95a446975688797c4ad8694c9c87706569d7eb4c03287050d9d6c48ff4bd400df7f2d878f880da07b06a277bf06200fa7f6eab9471079a8ae0e2ec1b5f1c3177b092d0de014d80fe83344f74489543d652956890bf44d9d8e393f95cffce84ff650638583bc6eb45701b63421b6dfbc6c2a22eded97dffa3eafd6eb74a880d0d4f49cbaac6efe811c988d82080534883aef7519f360450bd87c29eac80ed346a671dbb1b8d8abb36b43c32f37f9edb1da9d13f9ad0b03363aa08350e471e2cea1bb9ef0a305cd5f3ebee709e68e1cf7f920b0c45ac86ea130e5b27c43b3a74bc38f651c50051b7f970561fac6c5d5c308798821ca921924bfd22fd5a6f10e41e51ba7a3b663f45a889ea2867891462188a1911e355116e7bd058d042a75ced3b88e79577ee144d4a893db5406a1a1013df1630b98bbd5590dd3d8290c84f79a3919cd2e6925c28c1c7af5efefac24d8811829ec28a8bd3e16e08586cbb921be7f76f8637b3f214592a95aa64520958eb89afeb05ffeaa042baf409b1b12791fe77bb02df47cf244b66fde787b65a7476f426aa5b656f8d39104f6db9ebb1f0cc9fe8c723d2ff3d08002000", @ANYRES32=r9, @ANYBLOB="9e30612aaee92111be70c562c370f3eed363306d9bae9ef770165069eec73f632bd9103984c6a36f5145c4cde5ff04b6485b82dee8e17ce66bbd11aa3cb361ca34dbb830fd4b1fb1014ce8226bf207f5ba16ce5f450f0012002f6465762f76637375230000000008007700", @ANYRES32=r10, @ANYBLOB="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"], 0x25d8}, 0x1, 0x0, 0x0, 0x24048080}, 0x20000055)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xfffffffc, 0x0, 0x0, 0x0)

13:47:51 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 2831.322746]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2831.351254]  ? wait_for_completion_io+0x270/0x270
[ 2831.351671]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2831.352064]  ? vfs_write+0x354/0xb10
[ 2831.352382]  ? fput_many+0x2f/0x1a0
[ 2831.352693]  ? ksys_write+0x1a9/0x260
[ 2831.353019]  ? __ia32_sys_read+0xb0/0xb0
[ 2831.353368]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2831.353807]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2831.354245]  do_syscall_64+0x33/0x40
[ 2831.354562]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2831.354991] RIP: 0033:0x7f2774755b19
[ 2831.355346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2831.356848] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2831.357481] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2831.358073] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2831.358662] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2831.359280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2831.359872] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
[ 2831.369722] 9pnet: Insufficient options for proto=fd
13:47:51 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

13:48:06 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:06 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2000008)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40020000)

13:48:06 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:06 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
close(r5)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:06 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2846.733113] FAULT_INJECTION: forcing a failure.
[ 2846.733113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2846.734148] CPU: 1 PID: 40047 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2846.734729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2846.735442] Call Trace:
[ 2846.735681]  dump_stack+0x107/0x167
[ 2846.735996]  should_fail.cold+0x5/0xa
[ 2846.736329]  _copy_from_user+0x2e/0x1b0
[ 2846.736676]  __copy_msghdr_from_user+0x91/0x4b0
[ 2846.737074]  ? __ia32_sys_shutdown+0x80/0x80
[ 2846.737456]  ? __lockdep_reset_lock+0x180/0x180
[ 2846.737859]  sendmsg_copy_msghdr+0xa1/0x160
[ 2846.738225]  ? do_recvmmsg+0x6d0/0x6d0
[ 2846.738555]  ? lock_chain_count+0x20/0x20
[ 2846.738911]  ? __is_insn_slot_addr+0x123/0x290
[ 2846.739305]  ? lock_downgrade+0x6d0/0x6d0
[ 2846.739667]  ? mark_lock+0xf5/0x2df0
[ 2846.739985]  ? mark_lock+0xf5/0x2df0
[ 2846.740307]  io_sendmsg+0x62c/0x830
[ 2846.740620]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2846.741009]  ? mark_lock+0xf5/0x2df0
[ 2846.741333]  ? lock_chain_count+0x20/0x20
[ 2846.741689]  ? __lock_acquire+0xbb1/0x5b00
[ 2846.742062]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2846.742509]  ? __lock_acquire+0xbb1/0x5b00
[ 2846.742872]  io_issue_sqe+0x3b3/0x77b0
[ 2846.743209]  ? perf_trace_lock+0xac/0x490
[ 2846.743579]  ? io_connect+0x610/0x610
[ 2846.743905]  ? do_raw_spin_lock+0x121/0x260
[ 2846.744277]  ? lock_acquire+0x197/0x470
[ 2846.744615]  ? find_held_lock+0x2c/0x110
[ 2846.744974]  ? __fget_files+0x2cf/0x520
[ 2846.745313]  ? lock_downgrade+0x6d0/0x6d0
[ 2846.745672]  __io_queue_sqe+0x90/0x9d0
[ 2846.746008]  ? perf_trace_io_uring_register+0x500/0x500
[ 2846.746462]  ? io_issue_sqe+0x77b0/0x77b0
[ 2846.746813]  ? __fget_files+0x2f8/0x520
[ 2846.747162]  io_submit_sqes+0x44aa/0x8610
[ 2846.747552]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2846.747976]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2846.748389]  ? lock_downgrade+0x6d0/0x6d0
[ 2846.748741]  ? find_held_lock+0x2c/0x110
[ 2846.749092]  ? io_submit_sqes+0x8610/0x8610
[ 2846.749467]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2846.749881]  ? wait_for_completion_io+0x270/0x270
[ 2846.750294]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2846.750693]  ? vfs_write+0x354/0xb10
13:48:06 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80)

[ 2846.751014]  ? fput_many+0x2f/0x1a0
[ 2846.759996] 9pnet: Insufficient options for proto=fd
[ 2846.779386]  ? ksys_write+0x1a9/0x260
[ 2846.779400]  ? __ia32_sys_read+0xb0/0xb0
[ 2846.779417]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2846.779430]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2846.779445]  do_syscall_64+0x33/0x40
[ 2846.779457]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2846.779467] RIP: 0033:0x7f2774755b19
[ 2846.779480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2846.779487] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2846.779501] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2846.779508] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2846.779515] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2846.779522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2846.779529] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:48:06 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f0000000140)={0x0, 0x0, 0x14}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
clock_gettime(0x0, &(0x7f0000006240)={<r5=>0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000006040)=[{{&(0x7f0000000240)=@un=@abs, 0x80, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/230, 0xe6}, {&(0x7f0000001700)=""/219, 0xdb}, {&(0x7f0000001800)=""/251, 0xfb}], 0xa}, 0x3}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f00000019c0)=""/92, 0x5c}, {&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/195, 0xc3}, {&(0x7f0000002bc0)=""/79, 0x4f}, {&(0x7f0000002c40)=""/187, 0xbb}, {&(0x7f0000002d00)=""/89, 0x59}, {&(0x7f0000002d80)=""/97, 0x61}, {&(0x7f0000002e00)=""/110, 0x6e}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0xa, &(0x7f0000003f40)=""/128, 0x80}, 0xfffffffc}, {{&(0x7f0000003fc0)=@isdn, 0x80, &(0x7f0000004180)=[{&(0x7f0000004040)=""/74, 0x4a}, {&(0x7f00000040c0)=""/74, 0x4a}, {&(0x7f0000004140)=""/41, 0x29}], 0x3, &(0x7f00000041c0)=""/206, 0xce}, 0x101}, {{&(0x7f00000042c0)=@nfc_llcp, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/35, 0x23}], 0x1}, 0xff}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000043c0)=""/4096, 0x1000}], 0x1, &(0x7f0000005400)=""/77, 0x4d}, 0x58}, {{&(0x7f0000005480)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005500)=""/81, 0x51}, {&(0x7f0000005580)=""/115, 0x73}, {&(0x7f0000005600)=""/165, 0xa5}, {&(0x7f00000056c0)=""/180, 0xb4}, {&(0x7f0000005780)=""/28, 0x1c}], 0x5, &(0x7f0000005840)=""/233, 0xe9}, 0xffffff0d}, {{&(0x7f0000005940)=@can, 0x80, &(0x7f0000005d00)=[{&(0x7f00000059c0)=""/202, 0xca}, {&(0x7f0000005ac0)=""/110, 0x6e}, {&(0x7f0000005b40)=""/6, 0x6}, {&(0x7f0000005b80)=""/131, 0x83}, {&(0x7f0000005c40)=""/185, 0xb9}], 0x5, &(0x7f0000005d80)=""/109, 0x6d}, 0x8}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005e00)=""/243, 0xf3}], 0x1, &(0x7f0000005f40)=""/234, 0xea}, 0x8}], 0x8, 0x1, &(0x7f0000006280)={r5, r6+60000000})
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0x76bd, &(0x7f0000006300)={0x0, 0xc7a6, 0x4, 0x3, 0x32e, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000006380), &(0x7f00000063c0)=<r10=>0x0)
syz_io_uring_submit(r8, r10, &(0x7f0000006400), 0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000062c0)='./file0\x00', 0x200000, 0x6)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:06 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe0ffffff)

13:48:06 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r3, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x8000000)
syz_io_uring_submit(r6, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)

13:48:06 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x900000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 2846.983901] 9pnet: Insufficient options for proto=fd
13:48:07 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff7f)

13:48:07 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:07 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81)

13:48:07 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x200000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
syz_io_uring_setup(0x7897, &(0x7f0000000140)={0x0, 0xb519, 0x8, 0x2, 0x180, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:07 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap, 0x22}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2847.161486] FAULT_INJECTION: forcing a failure.
[ 2847.161486] name fail_usercopy, interval 1, probability 0, space 0, times 0
13:48:07 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd=r0, 0x8001, &(0x7f0000000240)=""/45, 0x2d, 0x5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x6, 0x13, r0, 0x10000000)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000040)={0x0, 0x3938700}}, 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8001, 0x8, 0x0, {0x0, 0x0, r0}}, 0x2)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r8, &(0x7f00000007c0)=""/180, 0xb4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4010, r8, 0x8000000)

[ 2847.162808] CPU: 0 PID: 40569 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2847.163504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2847.164299] Call Trace:
[ 2847.164566]  dump_stack+0x107/0x167
[ 2847.164922]  should_fail.cold+0x5/0xa
[ 2847.171520]  _copy_from_user+0x2e/0x1b0
[ 2847.171921]  __copy_msghdr_from_user+0x91/0x4b0
[ 2847.172374]  ? __ia32_sys_shutdown+0x80/0x80
[ 2847.172820]  ? __lockdep_reset_lock+0x180/0x180
[ 2847.173291]  sendmsg_copy_msghdr+0xa1/0x160
[ 2847.173723]  ? do_recvmmsg+0x6d0/0x6d0
[ 2847.174107]  ? lock_chain_count+0x20/0x20
[ 2847.174517]  ? __is_insn_slot_addr+0x123/0x290
[ 2847.174969]  ? lock_downgrade+0x6d0/0x6d0
[ 2847.175402]  ? mark_lock+0xf5/0x2df0
[ 2847.175787]  ? mark_lock+0xf5/0x2df0
[ 2847.176171]  io_sendmsg+0x62c/0x830
[ 2847.176542]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2847.176999]  ? mark_lock+0xf5/0x2df0
[ 2847.177381]  ? lock_chain_count+0x20/0x20
[ 2847.177807]  ? __lock_acquire+0xbb1/0x5b00
[ 2847.178250]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2847.178773]  ? __lock_acquire+0xbb1/0x5b00
[ 2847.179195]  io_issue_sqe+0x3b3/0x77b0
[ 2847.179605]  ? perf_trace_lock+0xac/0x490
[ 2847.180025]  ? io_connect+0x610/0x610
[ 2847.180406]  ? do_raw_spin_lock+0x121/0x260
[ 2847.180868]  ? lock_acquire+0x197/0x470
[ 2847.181269]  ? find_held_lock+0x2c/0x110
[ 2847.181681]  ? __fget_files+0x2cf/0x520
[ 2847.182075]  ? lock_downgrade+0x6d0/0x6d0
[ 2847.182502]  __io_queue_sqe+0x90/0x9d0
[ 2847.182901]  ? perf_trace_io_uring_register+0x500/0x500
[ 2847.183448]  ? io_issue_sqe+0x77b0/0x77b0
[ 2847.183866]  ? __fget_files+0x2f8/0x520
[ 2847.184279]  io_submit_sqes+0x44aa/0x8610
[ 2847.184726]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2847.185225]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2847.185716]  ? lock_downgrade+0x6d0/0x6d0
[ 2847.186131]  ? find_held_lock+0x2c/0x110
[ 2847.186550]  ? io_submit_sqes+0x8610/0x8610
[ 2847.186997]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2847.187507]  ? wait_for_completion_io+0x270/0x270
[ 2847.188002]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2847.188468]  ? vfs_write+0x354/0xb10
[ 2847.188853]  ? fput_many+0x2f/0x1a0
[ 2847.189221]  ? ksys_write+0x1a9/0x260
[ 2847.189606]  ? __ia32_sys_read+0xb0/0xb0
[ 2847.190015]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2847.190540]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2847.191053]  do_syscall_64+0x33/0x40
[ 2847.191467]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2847.191985] RIP: 0033:0x7f2774755b19
[ 2847.192363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2847.194164] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2847.194928] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2847.195651] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2847.196358] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2847.197066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2847.197777] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:48:24 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r7}}, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0)
syz_io_uring_setup(0x33b4, &(0x7f0000000240)={0x0, 0xbf0, 0x20, 0x1, 0x62, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r12=>0x0, &(0x7f0000000100)=<r13=>0x0)
r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r14}}, 0x0)
syz_io_uring_submit(r1, r9, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x5, &(0x7f00000007c0)=[{&(0x7f0000000340)="f2f54dc5d96bb09e2c25c784e9108d07adaa6288b9e2bbe234443b5ddb7cea7555e16604b11f7b5269aae88fa08a2a6b3dcbd26b82926efd83312bf5637c171eb5cb9c0eb9417daf69e82309379987aea8e5b9a72898d877e0c4ab5d983f116313b9abab43a4160ec503c07493ecb1ac2c", 0x71}, {&(0x7f00000003c0)="e165a4d4d13c4a3dcde61deecf3bd8bd72106b18030374", 0x17}, {&(0x7f0000000400)="2a4d527790", 0x5}, {&(0x7f0000000440)="a363410d35ac4dd1cfa0b282361c31708df183abd443da33082c41b762a576521b66a52f1a4f4369d9568126cf930e627f64a6467d4d029ccffe607d", 0x3c}, {&(0x7f0000000500)="053814e05ecea1444e3e625093cd2e069d643b756c21d022b2c10e0298930fd6d3c4db77988664b0d39233ed5e8e040a0a7291b1b12cd7181eddee04498e0e78e507bd", 0x43}, {&(0x7f0000000580)="d7b78d20f60ea8193edaa75f96a0e03615b3e851549473af4b98585c30a4230fa2cf0b5419ca7950ad7dd095", 0x2c}, {&(0x7f00000005c0)="a01dc23505d930df9705cc2ca9e0d524402f6356d73b3b828caec90c100c1b3dd28e6cd789e29cf6524c167172a8952007be386285ccfce9b41acfb8201df4ad3ff5ae42efb599053fa24acf5cdfaf1e6caff9aff272189348b837358aa8e2eb9c8d39fc631eb2e1c5adaf67f12d2fdf03fa1646e9e9e3c083f390e69e8b2b5638c7f6979646af785d59d0a7ca3bfa93a418992f3209ab7e0853554497d740b48e09e7d62c43607d39f66f5499cf8dab1e526c54d9ef65dc9f8f1730f0feee9110df722434e5a0e857d3fd266b980b2cb38ed56a4fab928766e3326df63343295a656dfcb6262ca0f403faadac6f5facb0e3bc5ebf55bbbf", 0xf8}, {&(0x7f00000006c0)="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", 0xfc}], 0x8, 0x11, 0x0, {0x1, r14}}, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r16 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000980)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
syz_io_uring_submit(r8, 0x0, &(0x7f00000009c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x8001, {0x0, r16}, 0x5, 0x8, 0x0, {0x0, r7}}, 0x80000001)
syz_io_uring_submit(r15, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2864.131914] 9pnet: Insufficient options for proto=fd
13:48:24 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl, 0x22}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:24 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82)

13:48:24 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:24 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe0)

13:48:24 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:24 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x2084, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x6000, @fd, 0x3, 0x6, 0x800, 0x1a, 0x1, {0x2, r10}}, 0x7)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x10000000)
syz_io_uring_submit(r1, r11, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x9, 0x7, &(0x7f0000000140)=[{&(0x7f0000000080)="297463173e", 0x5}, {&(0x7f00000000c0)}], 0x2, 0x8, 0x0, {0x1}}, 0x8dd)
r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:24 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x2, 0x5, 0x1, {0x0, 0x0, r0}}, 0xd0fc)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2864.228202] FAULT_INJECTION: forcing a failure.
[ 2864.228202] name failslab, interval 1, probability 0, space 0, times 0
[ 2864.229361] CPU: 1 PID: 40811 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2864.230001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2864.230744] Call Trace:
[ 2864.231004]  dump_stack+0x107/0x167
[ 2864.231349]  should_fail.cold+0x5/0xa
[ 2864.231715]  ? create_object.isra.0+0x3a/0xa20
[ 2864.232106]  should_failslab+0x5/0x20
[ 2864.232429]  kmem_cache_alloc+0x5b/0x310
[ 2864.232775]  ? mark_held_locks+0x9e/0xe0
[ 2864.233121]  create_object.isra.0+0x3a/0xa20
[ 2864.233493]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2864.233924]  kmem_cache_alloc_bulk+0x168/0x320
[ 2864.234315]  io_submit_sqes+0x6fe6/0x8610
[ 2864.234686]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2864.235104]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2864.235512]  ? lock_downgrade+0x6d0/0x6d0
[ 2864.235911]  ? find_held_lock+0x2c/0x110
[ 2864.236293]  ? io_submit_sqes+0x8610/0x8610
[ 2864.236697]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2864.237147]  ? wait_for_completion_io+0x270/0x270
[ 2864.237595]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2864.238021]  ? vfs_write+0x354/0xb10
[ 2864.238373]  ? fput_many+0x2f/0x1a0
[ 2864.238715]  ? ksys_write+0x1a9/0x260
[ 2864.239071]  ? __ia32_sys_read+0xb0/0xb0
[ 2864.239451]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2864.239959]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2864.240437]  do_syscall_64+0x33/0x40
[ 2864.240792]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2864.241259] RIP: 0033:0x7f2774755b19
[ 2864.241606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2864.243229] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2864.247953] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 2864.248597] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2864.249244] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2864.249889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2864.250533] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:48:24 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:24 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="32656a7d3b5cb2986d61cdc3ed9005b552e2f475d974259acea3cc8ab890354642c7124be4a37b2cd068071fca814484b026a1eabdf2e49e110758f25d4c4b9f", @ANYRES32=<r5=>r0, @ANYBLOB="0070de1d0088f16a4851b3534d3735c9d30000000000002e2f66696c653000"])
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=0x200, 0x4)
syz_io_uring_setup(0x7385, &(0x7f0000000200)={0x0, 0xe5f9, 0x4, 0x1, 0x357, 0x0, r5}, &(0x7f0000ff0000/0xc000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000280))
setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0xdef0, 0x4)

13:48:24 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x22, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:24 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000)

13:48:24 executing program 1:
r0 = memfd_create(&(0x7f0000000080)='/dev/full\x00', 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7ff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2864.360787] 9pnet: Insufficient options for proto=fd
13:48:24 executing program 7:
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x22011, r6, 0x8000000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
sendmsg(r7, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x15, "9922bdb0614c1df4037e4a751ce77fec49f5494f6f8f9fb4a54cf73dee4d4abcaaafee9634f11966f8787dc1e20892016ff60b0113c5d2078d74ddb926e3b5245654d0e5c5faa7a7705343326208082725fac68dc98d9780bd116646b801b051e0cadcda142f399ebec46aa8e77dced3166004b6e52dc5cf57dda516d707"}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="4333e5bf3d410fedb9717e2c14a9e02c63e0c3041e94069bd76c389be14277bbea8ebfda31e347d9d47e4e", 0x2b}, {&(0x7f0000000200)="6347018d4c5d43645d7998f3161a054661e9f1f043aba9b3bc09a8d2518acd120db3b9343af1999d8caadc6ff909", 0x2e}, {&(0x7f0000000300)="8e9c1f82e822d3b2bbadea9cd47ebc23178786e4ba424fbf9941a07c7766d2a896f767fc6eb16b5d753d4b57734740af75e4b1b8e5c8148f1a10460ed5c02639d036e19ef5351b0e122ad983418aba8086b27b11168cc5cc84f6ede850d034ee90ba7d0f1aae44c87cc8695a60c06ea7cdf6630ebb2ab286efc59538a6014113f706df876d253ef6d487af54ef5035ef6a2cea3b18b1a9fa89e51ed48fe79ab7564a1345b660070c0061926451294e234f99d0a2e8c1588ba50aeecc8d1410654a130963bbf974a5764c422f10d79b400551bccdcd3011f1ea7f8f17bd", 0xdd}], 0x3, &(0x7f0000000500)=[{0x40, 0x116, 0x1, "d1ececcb8a737a75ec8548ddf98d9bef624ebed12f7d39a522288dbbb8479d75e4869c54e83fb50ff8bc577c0613b562"}, {0xb8, 0x108, 0xfff, "8dded862e7605785a93f59e46582b808d8f756d3a01db11a911b23fdfd9c8383574682d155f5cc5a9198ea9d5aeed2291a4898fcfaf9593cd87ee3b4e982ffe1c618af2433ff61f89d0f42da64d46c3335b8c9e9cc0b6af9e22c572e428103bfa9fcfb0cac1525eff78a6367967f3b12713533c2d4f9119aff24869f1d04a2102a26bb6beeb0d5fedda6b86a0fe54c43d5e4c627444888a87e1f081493784958159bbd0713"}, {0x20, 0x3a, 0x401, "dbeb2f4df280f1a1781a"}, {0xc8, 0x3a, 0xd52, "2a6fc9f42aa8869ba63778885807b6b7ad5aabc289ede7470c6d8f6368b25be01968274622c1531f0aae8068decca42a43ced2ee3bc4e0e833b1207bbfbeb285d250591f7f030777cc7901669de692304a28102c6cc5e1a029252bebc42744d55738ee3520100122f1cb5e85d93820340a1f4210a5dcd6f58299cf78165fef066998a3c44ea15f5a50a1aa6534a03307aad7d386d790aaf615403f52aba9581009e72749174fc30d411a82d64c29c7c145"}], 0x1e0}, 0x44000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000400)={@multicast1, @empty}, &(0x7f0000000440)=0xc)

13:48:24 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb00000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:41 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x8051, 0x0, {0x0, r4}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0xdd, 0x2, 0x0, {0x0, r4, r0}}, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x0)
syz_io_uring_setup(0x4e41, &(0x7f0000000040)={0x0, 0xc1e1, 0x2, 0x0, 0x170}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200))

13:48:41 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x2c, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:41 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000200)={0x1, 0x49c64f1c})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x21, 0x0, 0x80000000, 0x7, 0x1}, 0x1)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r8=>r4, {0x6}}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r9)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000009c0)={{r8}, r9, 0x6, @inherit={0x58, &(0x7f0000000940)={0x0, 0x2, 0x0, 0x8000, {0x2a, 0x1, 0x800, 0x1, 0x67c}, [0x5, 0x4]}}, @name="3dd2d207a14ff5b825fbd825e85a74a903ecd4c5607cf610069c1c260de28bde4bd2283e9365b83b7610f52639776393d39509d1f1dd05498a2c607f57960df421246d392900cda64037f8250ecd46845c506d07c82f2026b77a423493cff2047d203332aafc2f9eefd041a5c0843b65e344833f238b43763a1de9fda50290d7d63a76950cdc9d4be627ae49f019c3c3821c78d89502b4b0633293c0df0740b151ba08685fa86f6a51e07d344511daad2928d5ac0fab16460e20e3b0ed35d06789870da511f550884d2cc5a2c7901b3c844d8a06ac8c758a0ed828b5bc3377450c55b6086f8f622867e2452fe7ca06d4a0c618f585ba66c3ce82e5fbc8f822e2ff69baa974a30000608e821ca824b3de1dcca0527594a007b1e255a0f28c3652b1fa7dbb33948c0b99c458382897dbd241a3e2f0d71160eac17773a420735d04a542e5bf52bee10482b254d2797b390c3ab4fa313666f3a3abd208c338eda7c2bbad6e456782babed83bec9cc8b0565082d7d1fb8966a1880141d942f4640c8f59b29d2752fb7b61afb1e19a94c7e66c478f261135d26324a850dc3f0c62973e93f2ef7f5fad2ee2073845d5ac7ef820f278e3c4ed7c2c9f58a504089a9bfa7821cf2e8783b02dc4d55d776e69b36979180b5ce419729e0d898b3a14fbdf96127d52bd9e2c538a233339c269cc784c7d18a606db9380e672ef89507020f0423d2832ec412560722d81e35bb07069d92accddf72d42184d060e42f3bb29adb26408b4e2df1ecbc7ee64c17eac858976033c9fa4691077855eb80a88420eff76956efee35207964fde4b2a398d7ce7c7b02090828a2aea9f041101e0411702f076de0cbb9b812b1f189e84f7f11dad97aaaf9072cfc15d92c05bf462f97e548fa222aa16646142a11898f76813b957f7df2562848f055845058d0f303930a1bc0891b4c84f120379a45ba176ea0c53e7f48e01f9b8ae80d3e55d496dd9a49f83764126aa8dc01c1a1b70994bc58cd501debda50e5212c72768e1be5a1c70fa8b40b38fa168c0b7bd843538d52b2ebfa2192ef52a53a0e104ed55c6faa1710d2a9d38200e658303eb38526cbe9681fb9e6b66fedffbed3ca6804e649449e540d062b2da82092392a19b32d3e4bb4b44ea37b192bb8f6b9355d5c78c773adffdcf8259f3a713f873a0ed40fe3a700c14d4165b87f3680c6e5a1d61302502869fcac61ada3af62d2aeaff92931d8865cbe10d427e5f302f2133d1fbf324e97d54ff48a52c4ba6634e692c85b42c8a905a26d045049bee76c22c638f0b9b8886165b9c220a22d74de65cc7b8e2e1aab46aaef6bd8be6feb505a625766464aed8b415a2a1fc46613a683fab2149e53689faf0054e132234f462a41c5d49db3f2999645a905bcd614e8e29d619c359efe45766d3cfd9a0d63a24db66d51177e28ec5fd360b1e758a00cfc40b269b9ca7206a2d1c161be5fce1afa344de577458317c74bf3b958563ab1a007cddc5d3fefc4ebae86e0ebe9c7bc1a02b276de8df9be25667896e31e7e2f5b7880f89f644b32b7ae7285fce3b94dfe58f77916e5b604e52fc4948c819c97e9cdb01bde0966b5fca97a412087c0e7a31f841864f4636172fe9c2255d7dfcf7109792799fa972f4573ce749955b1de8ad21370ef63a8a07ef95cf2857a384c6a0778ec99918704ec77b2ca4944cc1eceb6dc89823f9aca4e08d027926672ad41e44a96d55825b6f5ec43313cb08becd299aa08343648a189d13b065788476957a3d13c55c9596217889bd15ead2b99393b6e54afc8a90a060f7879729b3d9b4c837074bfc833575b98c3805d6230ad3b4215594754046a3e06f43c0a9a518fccb13dd291d012e335a31654ae7982ad282e23a38e244f8888f6d780f777f533845d563fc98169e3efc855db4c2d2c9e7e30d4f092b6851ddc9b20837c5523f801838fc3527f057ffbab9fb2943b5566fffeb409506c5d73bc27d71271b2b0fb01663cc25429b8b204fe07b7db4c91152ccd7240ab37fa64176b0308f5d8ecebed6ed1f727e034f5e1d4b1cc3916311dee402a8b4cb1fb83a15e256679ac276abec7e01e62089c48db2230b62aa56895da61938ce56d3d65bb704f07eb92e5727faaf4ecd0dd4bfb1e9e2184b53ee46a2f90a49af4ee3acf2bd9b94dfec37b9165b4c99c7f4b1f43f961d826e96deb880d93f9b6bf9d4384b185b887f66118c497fd56a3bcbfe3b37a92f8266f59d08bd18285db969479a938eeb8c32ac362653a99ca59427c79b5e5b5e4719e6b2a32f9e1ae6dbde26dc9c7407a3d23ec2a18df20aa8ebb04cd27ffae0ceed33a702e3c4f78f708e586ccbbef64e808cefd057ebddb0139403149124318b2fc396ecafdb3dd0b405dd7de288d84fac6597bfc8dadb611a4e66ab21299f10ffcbf26eb44e4e7e8dcedf52a25b6793e4dc5ae2aeb9e5bf894a367f83d1b9f45ee4a93da7a42d04512c56a1f377744969dfa64d9af43892d877c9c72d989f4e86dad717044931bd450897dbaf46b80a6feed7b4e71a87d3e3c7bf31746eea3f282cad23a58424e4bdc0a156d5cc9996a9d6c0b3d6c482acf0ed5543960f4b6e548825dfb5e42058ada05617d84a5994faea6b3382fa2beeba4fff68131d4c00770565c9ba0a8fe6a21eb867fc56e3f670ccc0666c66a665e25e149b9528ad0d79f6499655ae489f1d2cf7efb3ee3da177934ca3cdf6a221ad71bc8cc7fd24403518b7c25339261593578c8ba3fe9c4102af16cf31843e3968caa41b7967e68d117e2e7ea2d52ae48d839f4475d431d7d5510a7286ec4a83a57d25de0d5b5690d79a33cae199f97bc64f2171410043e00f89f35a530b705347ecb877f0d4f2f1fe33f0f81a72184246571e0a3eddc82fac14a896eef268a43c4858f5f9fa627b9cd200b598e9c23b9e0380f94657c551daeba3590f23860a0546852f08f8d8fb40ff601d59f0fd5003c4c3b0fb9b00c92882e04dd96532ed65825f0701bb62a5e7e9310d2c8d43db3d9dfbf226aeb12cecaebf7c2506a456db5312f8fe1ad8518c4f84403fab01115fb6965fb3f1b12c738b8293162a19836a1c682e99e271a496149b09bbf6545c8af40c501ab28a57ec6c3f0b6befdfba3d5af3ebe60246b627b552456d4c6a1a188fa74090810ab8ccd41fbb71ac7e1595d9551e3e55a31f0b7c53ed367e7cba12feeaf09d03a9d61cc66a8ab5be4a0d0fc963b296738c73a4a675a23590dc2558246a9affc9239f5795f2b9d3f6d33390ad034033deedc8fa9e825de43c71f6721c9afa50608e4758f6b5af6f7ea84b86d58203cb004b243684284afd3d28d7375ce879a67d4242dbe74dfa129283d5c8cc8bf1489be987a3ff9ae5960b2277f6fd5d0e4eb9c5d194be9e1827b46126a3fccf706110eeda589ad2640149eb61177da9e8c498b082284d035b05c257f2ffb4fa2d6fff5f05b5996a38773683c723c0344079f2766c8f01481e03e7e40eab8a5d206d66b3015c5236f916fad681d9f6c2f041c9f8b682e81bbeab14b24d792d2a3c693e8e84af156a7569b94b9b428cc8090c7cf61ab3572021e4d89f292ccf8bb1edc244dfefd489bdc3dcd4de659b5407b133b48e22bb75a72674ca44f0fd40e401e556351d8513948efedb60b630f1781565b5c319051109492ec0177497fba856a7f065e28bc0974869f96e9aa747c4030ee15bad29de7b566d916fc3efd3d84d996f4075cce0686c2ad5c92de7d7cace11ca969b4c9588d7ffaf5fc04ef35608b13462a495743702e9ef002a23f515c72662c8c5fbf3e2888754f0a89cacb2e19d93f182886a5d4b02125ab6c365f6c970c8888895e6439da924e94982c835fcdb975d55c00e74ac47c221aca77c83ce1f929faf1ccf5b00ba51b1d5ebeec00a1a1b850607285b69ad251104108dde2d1a6b021031a880a0823db6b8aabb61eb7e208c2f4e60dc173834291e391fa5647819314c2edff5ada397113959873b09f7e9db437401e3f4918ee2d4973ed1650c9e22093d4085410d1370390c4e30ceb885c03f6df34887c5e9d2165f8899ab007d0d2c4c15765593760838fe5add378f81850223cb130c3293e9932d89d2a17138c6d56786b45e3f5e667731280ba8bcd9c5351ea97ac549f6227c5b4944b697f88d585a44e3b5aa3576d5ac27c116124a984cee46f11fb05e8b4d9015533023df6fd9cf827cefced8db2742b4ae91b3f76c87227a7d4fc0211ae6a69116eec2ad2c1cf3d836280d6e651d7b17dd94bdf9eb3a8181d0a5eb1b682f7ed3b258ba9d43d209632e1dc19f25c6ff3dfcde8d1f209b7a691fb7234a6076eceb345462eaaf8d776d64c4fb47e0b47b598d0c177976838228f5ef84247007fb49c80402ae6bc45f33adf7a6df0710ffd4a70ff4914d3774b3aa3e8da855fc02155bacc4d33817608ed82127ee16a2a111765bf0e06de1b50ad9522a71dca48c050b11eb1ea34077cbf288d67783e7d4128bb8f7a6564ce9fb15b239a0149668a93d705d7ff3cb4628f3a886616ab977039feba7fcda1819f18c4dae19d01e1c712ad0f76ef8c12b6a9c5fb01f227a216862eca063543cb937eea7c59806c2fe0c83bf5c4993b91dab527cfe20e269dafd9ac7232452c1912ada20180d98891391de04f685bfe62e640957f9dcc405db31b450ecac1fcb3d66af31301c56e82bf5076da615a8b581be06c9dc0d93e33f21e70fecbf40709cec19ac861df38730ff28ac9fb7289253dd28b04136fa5cf5bc53e32088b473ecba9d5a1db8e3179ddd02c17af6a17ee0f5532d7c4361ffb86400d9cd510387783ca61056510d4fc14775ee75212c9bc1aab87cea3baa352bc80f03fac76218415bbf8416b94b1a25a577985619b0948c6f3d22c5a9da20e59977f5f61ebf61bf8fb0b8925877c94211af9f68b428272e8f4720c4b752ce78faa8ba527d701b8d3f76cef29ab35004f40ad4246739bbc26d962e052b0f37ea09b43f99227eb26398719b73219c3db21eb331c0b07cac0574e085558ee245b0d5a7f14e8ed2ae2c1f84b9b68429541a2e61d82f5c85ef4eb9567e090c43989cda87ba65139dcb30fe0dc7ebf7f33a755510a9bd18dc3449d215261bec3b6e9e0e93e6a68af2aa13238213cca9657830a8150e80635bbdd61bd85efa427ee2559abc8fe19a911ce800ac7677dcba4debecb962c47ddf7bf4dc00a258360588a94f548d67eba5aec3b79a3ca15a43a57ff4cc12b1668bc24bee5365631ec94aeeccb46c29a451244737aecacb1ba6dd3540453cc92e351fef97b0d7a7a8fb18dab86c9f80d695de3208e27191a05bdfd4840b94d9f6bee8e780c74d467582886290ac017a7bb323b7d71fcfcf19c278e1287a11be8cedc5db5640f7fcdddb144151095b2e9bc9969d92c18e9f25adffb6dba59f604650fd18c97e34d9d8ff4abd7d1a023c84983f273d611b1610cf42a41f99e403f9cdbb77827b0be7ce60ce370f1d34cd0fd96d5f24f22d34b3764e007d128a6b6571200e1d7b7bef90ae40aae5f901bba02f9824854c097b502baad85c0863a58a5013daefca89830bc0fa6fd2fca52204ed7b670e8987bf4bbd3688d2fbf345907ef88beb67db729bb73962d2d8ed9b65da787de949701d46356728f18e2e62cb2231199a642a0e2c1b5e41361a138dccb6ae5c96a80629b4f8bd6050a7e1c0ac715789ea85cdad3b"})
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x60, 0x9}, 0x18)
preadv(r10, &(0x7f0000000740)=[{&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000640)=""/197, 0xc5}], 0x7, 0x9, 0x3)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:41 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:41 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x8000000)
recvmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000340)=""/217, 0xd9}], 0x3}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/155, 0x9b}, {&(0x7f00000006c0)=""/1, 0x1}], 0x5, &(0x7f0000003180)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000007c7500f61af0b5716165f9c5fe637f5b15988f910e006b6614607eb26e40669f2549198e381802ea8166cafc0324076ba978192b3063ddb2f61c1045133967c1b957e030d453592a0e105973"], 0xd8}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/52, 0x34}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000000a00)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000b80)=""/3, 0x3}, {&(0x7f0000000bc0)=""/36, 0x24}], 0x7, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYRES32=<r6=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32=<r7=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}], 0x3, 0x40000060, 0x0)
[ 2881.193981] 9pnet: Insufficient options for proto=fd
syz_io_uring_submit(r4, r2, &(0x7f0000003140)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000003100)={&(0x7f0000000e00)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e80)="6bd91b3aef10b561dfe77f5dce0fc293fa2dd85ec20d72aae7da14dc1a4732fa77b043e25c584b1bbbc09a08ce0e8687aacd34e6d54ff4473f48ac43aa19b057671791b7a04047c35c2b072d5fbe0c00a2b8fc21223b84613d35769f20df2329786efeb7cbe3eb6fc63ff41103dd11237f7087966cbc7c6519e5111424beeecaf9747a907a505f351af5960fdabe461c50694c6099fd0999699a42a48dd23262ffd1cfb943a99f9269bf9afd167f796320c44c198cf1228770a714d2b953e2d89fc1", 0xc2}], 0x1, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x2140}, 0x0, 0x40004, 0x1}, 0x3)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(0x0, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x80010, r7, 0x10000000)
r11 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r13=>0x0, &(0x7f0000000100)=<r14=>0x0)
r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0)
syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r15}}, 0x0)
syz_io_uring_submit(0x0, r10, &(0x7f0000000780)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x800, 0xfffffffffffffff7, {0x0, r5}, 0x8, 0x0, 0x1, {0x0, r15}}, 0x5)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:41 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:41 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83)

13:48:41 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000)

[ 2881.252868] FAULT_INJECTION: forcing a failure.
[ 2881.252868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2881.253997] CPU: 0 PID: 41453 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2881.254635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2881.255398] Call Trace:
[ 2881.255653]  dump_stack+0x107/0x167
[ 2881.256011]  should_fail.cold+0x5/0xa
[ 2881.256375]  _copy_from_user+0x2e/0x1b0
[ 2881.256754]  __copy_msghdr_from_user+0x91/0x4b0
[ 2881.257189]  ? __ia32_sys_shutdown+0x80/0x80
[ 2881.257606]  ? __lockdep_reset_lock+0x180/0x180
[ 2881.258046]  sendmsg_copy_msghdr+0xa1/0x160
[ 2881.258448]  ? do_recvmmsg+0x6d0/0x6d0
[ 2881.258811]  ? lock_chain_count+0x20/0x20
[ 2881.259200]  ? __is_insn_slot_addr+0x123/0x290
[ 2881.259625]  ? lock_downgrade+0x6d0/0x6d0
[ 2881.260031]  ? mark_lock+0xf5/0x2df0
[ 2881.260378]  ? mark_lock+0xf5/0x2df0
[ 2881.260729]  io_sendmsg+0x62c/0x830
[ 2881.261076]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2881.261498]  ? mark_lock+0xf5/0x2df0
[ 2881.261856]  ? lock_chain_count+0x20/0x20
[ 2881.267814]  ? __lock_acquire+0xbb1/0x5b00
[ 2881.268220]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2881.268704]  ? __lock_acquire+0xbb1/0x5b00
[ 2881.269097]  io_issue_sqe+0x3b3/0x77b0
[ 2881.269464]  ? perf_trace_lock+0xac/0x490
[ 2881.269850]  ? io_connect+0x610/0x610
[ 2881.270202]  ? do_raw_spin_lock+0x121/0x260
[ 2881.270603]  ? lock_acquire+0x197/0x470
[ 2881.270970]  ? find_held_lock+0x2c/0x110
[ 2881.271350]  ? __fget_files+0x2cf/0x520
[ 2881.271715]  ? lock_downgrade+0x6d0/0x6d0
[ 2881.276126]  __io_queue_sqe+0x90/0x9d0
[ 2881.276489]  ? perf_trace_io_uring_register+0x500/0x500
[ 2881.276981]  ? io_issue_sqe+0x77b0/0x77b0
[ 2881.277358]  ? __fget_files+0x2f8/0x520
[ 2881.277732]  io_submit_sqes+0x44aa/0x8610
[ 2881.278133]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2881.278587]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2881.279029]  ? lock_downgrade+0x6d0/0x6d0
[ 2881.279406]  ? find_held_lock+0x2c/0x110
[ 2881.279789]  ? io_submit_sqes+0x8610/0x8610
[ 2881.280201]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2881.280648]  ? wait_for_completion_io+0x270/0x270
[ 2881.281096]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2881.281522]  ? vfs_write+0x354/0xb10
[ 2881.281870]  ? fput_many+0x2f/0x1a0
[ 2881.282205]  ? ksys_write+0x1a9/0x260
[ 2881.282555]  ? __ia32_sys_read+0xb0/0xb0
[ 2881.282930]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2881.283409]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2881.283920]  do_syscall_64+0x33/0x40
[ 2881.284263]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2881.284732] RIP: 0033:0x7f2774755b19
[ 2881.285076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2881.286747] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2881.287443] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2881.288114] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2881.288764] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2881.289413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2881.290062] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:48:41 executing program 4:
r0 = syz_io_uring_setup(0x15d3, &(0x7f0000000200)={0x0, 0x39a1, 0x1, 0x0, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_enter(r0, 0x65e5, 0xe599, 0x3, &(0x7f00000000c0)={[0x9]}, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x101800, 0x4)
io_uring_enter(r4, 0xd93, 0xa18f, 0x1, &(0x7f0000000080)={[0x7]}, 0x8)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:41 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_setup(0x1274, &(0x7f0000000080)={0x0, 0xaaf4, 0x4, 0x3, 0x340, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000180))
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:41 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:41 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

[ 2881.379120] 9pnet: Insufficient options for proto=fd
13:48:41 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:41 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_setup(0x4778, &(0x7f0000000040)={0x0, 0x8c3e, 0x8, 0x3, 0x2e8, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000200))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x5c1200, 0x0)
r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r12=>0x0, &(0x7f0000000100)=<r13=>0x0)
r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r14}}, 0x0)
syz_io_uring_submit(r5, r8, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2000, @fd=r9, 0x5914, 0x1, 0x7ff, 0x2, 0x0, {0x3, r14}}, 0x3)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000300))
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:41 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x26d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:41 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84)

13:48:41 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2881.528948] FAULT_INJECTION: forcing a failure.
[ 2881.528948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2881.530114] CPU: 0 PID: 41801 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2881.530755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2881.531522] Call Trace:
13:48:41 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
syz_io_uring_setup(0x5276, &(0x7f0000000080)={0x0, 0x414a, 0x8, 0x1, 0x3df}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000180))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r12}}, 0x0)
syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x9)
close(r3)
r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r13, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2881.531789]  dump_stack+0x107/0x167
[ 2881.532145]  should_fail.cold+0x5/0xa
[ 2881.532508]  _copy_from_user+0x2e/0x1b0
[ 2881.532886]  __copy_msghdr_from_user+0x91/0x4b0
[ 2881.533320]  ? __ia32_sys_shutdown+0x80/0x80
[ 2881.533737]  ? __lockdep_reset_lock+0x180/0x180
[ 2881.534178]  sendmsg_copy_msghdr+0xa1/0x160
[ 2881.534579]  ? do_recvmmsg+0x6d0/0x6d0
[ 2881.534941]  ? lock_chain_count+0x20/0x20
[ 2881.535577]  ? __is_insn_slot_addr+0x123/0x290
[ 2881.536024]  ? lock_downgrade+0x6d0/0x6d0
[ 2881.536411]  ? mark_lock+0xf5/0x2df0
[ 2881.536757]  ? mark_lock+0xf5/0x2df0
[ 2881.537108]  io_sendmsg+0x62c/0x830
[ 2881.537448]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2881.537872]  ? mark_lock+0xf5/0x2df0
[ 2881.538225]  ? lock_chain_count+0x20/0x20
[ 2881.538615]  ? __lock_acquire+0xbb1/0x5b00
[ 2881.539020]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2881.539508]  ? __lock_acquire+0xbb1/0x5b00
[ 2881.539917]  io_issue_sqe+0x3b3/0x77b0
[ 2881.540284]  ? perf_trace_lock+0xac/0x490
[ 2881.540673]  ? io_connect+0x610/0x610
[ 2881.541026]  ? do_raw_spin_lock+0x121/0x260
[ 2881.541434]  ? lock_acquire+0x197/0x470
[ 2881.541815]  ? find_held_lock+0x2c/0x110
[ 2881.542197]  ? __fget_files+0x2cf/0x520
[ 2881.542571]  ? lock_downgrade+0x6d0/0x6d0
[ 2881.542960]  __io_queue_sqe+0x90/0x9d0
[ 2881.543326]  ? perf_trace_io_uring_register+0x500/0x500
[ 2881.543828]  ? io_issue_sqe+0x77b0/0x77b0
[ 2881.544210]  ? __fget_files+0x2f8/0x520
[ 2881.544590]  io_submit_sqes+0x44aa/0x8610
[ 2881.544996]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2881.545455]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2881.545903]  ? lock_downgrade+0x6d0/0x6d0
[ 2881.546284]  ? find_held_lock+0x2c/0x110
[ 2881.546665]  ? io_submit_sqes+0x8610/0x8610
[ 2881.547073]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2881.547522]  ? wait_for_completion_io+0x270/0x270
[ 2881.547981]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2881.548412]  ? vfs_write+0x354/0xb10
[ 2881.548759]  ? fput_many+0x2f/0x1a0
[ 2881.549097]  ? ksys_write+0x1a9/0x260
[ 2881.549353] 9pnet: Insufficient options for proto=fd
[ 2881.549454]  ? __ia32_sys_read+0xb0/0xb0
[ 2881.550249]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2881.550733]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2881.551210]  do_syscall_64+0x33/0x40
[ 2881.551556]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2881.552045] RIP: 0033:0x7f2774755b19
[ 2881.552390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2881.554066] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2881.554767] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2881.555424] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2881.556092] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2881.556749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2881.557406] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:48:57 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:57 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '\".'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:48:57 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:57 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x404}, 0x1}, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, <r9=>0x0})
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0xf6, 0x0, 0x4, 0x0, 0x80000001, 0x8121a, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x9}, 0x18000, 0x81, 0x53, 0xa, 0x7f, 0x3, 0x8, 0x0, 0x5, 0x0, 0x1}, r9, 0x10, r10, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa00000000000000)

13:48:57 executing program 4:
r0 = syz_io_uring_setup(0x2f48, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:57 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85)

13:48:57 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap, 0x22}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

[ 2897.743148] FAULT_INJECTION: forcing a failure.
[ 2897.743148] name failslab, interval 1, probability 0, space 0, times 0
[ 2897.744525] CPU: 1 PID: 42148 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2897.745818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2897.747367] Call Trace:
[ 2897.747857]  dump_stack+0x107/0x167
[ 2897.748265]  should_fail.cold+0x5/0xa
[ 2897.748598]  ? create_object.isra.0+0x3a/0xa20
[ 2897.748997]  should_failslab+0x5/0x20
[ 2897.749326]  kmem_cache_alloc+0x5b/0x310
[ 2897.749677]  ? mark_held_locks+0x9e/0xe0
[ 2897.750030]  create_object.isra.0+0x3a/0xa20
[ 2897.750408]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2897.750846]  kmem_cache_alloc_bulk+0x168/0x320
[ 2897.751243]  io_submit_sqes+0x6fe6/0x8610
[ 2897.751620]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2897.752104]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2897.752521]  ? lock_downgrade+0x6d0/0x6d0
[ 2897.752875]  ? find_held_lock+0x2c/0x110
[ 2897.753230]  ? io_submit_sqes+0x8610/0x8610
[ 2897.753607]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2897.754023]  ? wait_for_completion_io+0x270/0x270
[ 2897.754439]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2897.754836]  ? vfs_write+0x354/0xb10
[ 2897.755158]  ? fput_many+0x2f/0x1a0
[ 2897.755472]  ? ksys_write+0x1a9/0x260
[ 2897.755799]  ? __ia32_sys_read+0xb0/0xb0
[ 2897.756468]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2897.757444]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2897.758402]  do_syscall_64+0x33/0x40
[ 2897.759093]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2897.760103] RIP: 0033:0x7f2774755b19
[ 2897.760793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2897.768330] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2897.769736] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2897.771049] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2897.772185] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2897.772788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2897.773388] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:48:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1802000000000000)

13:48:57 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:57 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r5, &(0x7f0000000200)={0x4000, 0x10, 0x1}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:48:57 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86)

13:48:57 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r4, &(0x7f0000000000)={0x8}, r5, 0x1, 0x0, 0x1}, 0x7fffffff)
socketpair(0x25, 0x3, 0x6f2, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x7, 0x7, 0x2, 0x7, 0x5]}, &(0x7f0000000300)=0x54)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2897.938271] FAULT_INJECTION: forcing a failure.
[ 2897.938271] name fail_usercopy, interval 1, probability 0, space 0, times 0
13:48:57 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xf6ffffff00000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:48:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

[ 2897.939398] CPU: 0 PID: 42265 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2897.940058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2897.940824] Call Trace:
[ 2897.941079]  dump_stack+0x107/0x167
[ 2897.941422]  should_fail.cold+0x5/0xa
[ 2897.941787]  _copy_from_user+0x2e/0x1b0
[ 2897.942168]  __copy_msghdr_from_user+0x91/0x4b0
[ 2897.942605]  ? __ia32_sys_shutdown+0x80/0x80
[ 2897.943025]  ? __lockdep_reset_lock+0x180/0x180
[ 2897.943469]  sendmsg_copy_msghdr+0xa1/0x160
[ 2897.943874]  ? do_recvmmsg+0x6d0/0x6d0
[ 2897.944264]  ? lock_chain_count+0x20/0x20
[ 2897.944653]  ? __is_insn_slot_addr+0x123/0x290
[ 2897.945076]  ? lock_downgrade+0x6d0/0x6d0
[ 2897.945464]  ? mark_lock+0xf5/0x2df0
[ 2897.945811]  ? mark_lock+0xf5/0x2df0
[ 2897.946161]  io_sendmsg+0x62c/0x830
[ 2897.946502]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2897.946925]  ? mark_lock+0xf5/0x2df0
[ 2897.947277]  ? lock_chain_count+0x20/0x20
[ 2897.947664]  ? mark_lock+0xf5/0x2df0
[ 2897.948053]  ? lock_chain_count+0x20/0x20
[ 2897.948454]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2897.948940]  ? __lock_acquire+0xbb1/0x5b00
[ 2897.949334]  io_issue_sqe+0x3b3/0x77b0
[ 2897.949699]  ? __lock_acquire+0x1657/0x5b00
[ 2897.950099]  ? perf_trace_lock+0xac/0x490
[ 2897.950489]  ? io_connect+0x610/0x610
[ 2897.950843]  ? do_raw_spin_lock+0x121/0x260
[ 2897.951252]  ? lock_acquire+0x197/0x470
[ 2897.951622]  ? find_held_lock+0x2c/0x110
[ 2897.952019]  ? __fget_files+0x2cf/0x520
[ 2897.952417]  ? lock_downgrade+0x6d0/0x6d0
[ 2897.952806]  __io_queue_sqe+0x90/0x9d0
[ 2897.953175]  ? perf_trace_io_uring_register+0x500/0x500
[ 2897.953669]  ? io_issue_sqe+0x77b0/0x77b0
[ 2897.954052]  ? __fget_files+0x2f8/0x520
[ 2897.954433]  io_submit_sqes+0x44aa/0x8610
[ 2897.954839]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2897.955299]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2897.955749]  ? lock_downgrade+0x6d0/0x6d0
[ 2897.956158]  ? find_held_lock+0x2c/0x110
[ 2897.956542]  ? io_submit_sqes+0x8610/0x8610
[ 2897.956950]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2897.957401]  ? wait_for_completion_io+0x270/0x270
[ 2897.957851]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2897.958283]  ? vfs_write+0x354/0xb10
[ 2897.958631]  ? fput_many+0x2f/0x1a0
[ 2897.958971]  ? ksys_write+0x1a9/0x260
[ 2897.959328]  ? __ia32_sys_read+0xb0/0xb0
[ 2897.959708]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2897.960219]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2897.960698]  do_syscall_64+0x33/0x40
[ 2897.961044]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2897.961522] RIP: 0033:0x7f2774755b19
[ 2897.961869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2897.963545] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2897.964274] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2897.964930] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2897.965591] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2897.966247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2897.966903] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:49:14 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000000, 0x50, r3, 0x8000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:14 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl, 0x22}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:49:14 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, ',.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:49:14 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4002000000000000)

13:49:14 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:14 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xffff000000000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:49:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87)

13:49:14 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6=@empty}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2914.302387] FAULT_INJECTION: forcing a failure.
[ 2914.302387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2914.303639] CPU: 0 PID: 42500 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2914.304302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2914.305069] Call Trace:
[ 2914.305327]  dump_stack+0x107/0x167
[ 2914.305673]  should_fail.cold+0x5/0xa
[ 2914.306037]  _copy_from_user+0x2e/0x1b0
[ 2914.306416]  __copy_msghdr_from_user+0x91/0x4b0
[ 2914.306851]  ? __ia32_sys_shutdown+0x80/0x80
[ 2914.307274]  ? __lockdep_reset_lock+0x180/0x180
[ 2914.307719]  sendmsg_copy_msghdr+0xa1/0x160
[ 2914.308122]  ? do_recvmmsg+0x6d0/0x6d0
[ 2914.308500]  ? lock_chain_count+0x20/0x20
[ 2914.308891]  ? __is_insn_slot_addr+0x123/0x290
[ 2914.309317]  ? lock_downgrade+0x6d0/0x6d0
[ 2914.309711]  ? mark_lock+0xf5/0x2df0
[ 2914.310065]  ? mark_lock+0xf5/0x2df0
[ 2914.310423]  io_sendmsg+0x62c/0x830
[ 2914.310769]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2914.311196]  ? mark_lock+0xf5/0x2df0
[ 2914.311551]  ? lock_chain_count+0x20/0x20
[ 2914.311943]  ? __lock_acquire+0xbb1/0x5b00
[ 2914.312382]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2914.312873]  ? __lock_acquire+0xbb1/0x5b00
[ 2914.313273]  io_issue_sqe+0x3b3/0x77b0
[ 2914.313640]  ? perf_trace_lock+0xac/0x490
[ 2914.314030]  ? io_connect+0x610/0x610
[ 2914.314384]  ? do_raw_spin_lock+0x121/0x260
[ 2914.314787]  ? lock_acquire+0x197/0x470
[ 2914.315154]  ? find_held_lock+0x2c/0x110
[ 2914.315537]  ? __fget_files+0x2cf/0x520
[ 2914.315904]  ? lock_downgrade+0x6d0/0x6d0
[ 2914.316308]  __io_queue_sqe+0x90/0x9d0
[ 2914.316677]  ? perf_trace_io_uring_register+0x500/0x500
[ 2914.317169]  ? io_issue_sqe+0x77b0/0x77b0
[ 2914.317552]  ? __fget_files+0x2f8/0x520
[ 2914.317932]  io_submit_sqes+0x44aa/0x8610
[ 2914.318338]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2914.318799]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2914.319249]  ? lock_downgrade+0x6d0/0x6d0
[ 2914.319633]  ? find_held_lock+0x2c/0x110
[ 2914.320014]  ? io_submit_sqes+0x8610/0x8610
[ 2914.320480]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2914.320932]  ? wait_for_completion_io+0x270/0x270
[ 2914.321382]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2914.321816]  ? vfs_write+0x354/0xb10
[ 2914.322163]  ? fput_many+0x2f/0x1a0
[ 2914.322505]  ? ksys_write+0x1a9/0x260
[ 2914.322860]  ? __ia32_sys_read+0xb0/0xb0
[ 2914.323241]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2914.323727]  ? syscall_enter_from_user_mode+0x1d/0x50
13:49:14 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_setup(0x6bd8, &(0x7f0000000080)={0x0, 0xcd0, 0x2, 0x2, 0x145, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
io_uring_enter(r0, 0x37af, 0x8009, 0x0, &(0x7f0000000400), 0x8)
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000300)=""/196, &(0x7f0000000040)=0xc4)
r6 = openat(r5, &(0x7f0000000440)='./file0\x00', 0x80100, 0x10)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c)

[ 2914.324204]  do_syscall_64+0x33/0x40
[ 2914.324571]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2914.332448] RIP: 0033:0x7f2774755b19
[ 2914.332796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2914.334459] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2914.335158] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2914.335806] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2914.336475] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2914.337129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2914.337782] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:49:14 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:49:14 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', <r6=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0), 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x238}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@remote}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @local, @private, @broadcast, @remote]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x9, "589a77a68f6d72"}, {0x5, 0xe, "f6cb2514b3697262f8251e7f"}, {0x1, 0x2}]}, @noop, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x4, "6b05"}, {0x1, 0x9, "b5f12bcb89500f"}, {0x5, 0x8, "18bd19a693e4"}]}, @lsrr={0x83, 0x23, 0x0, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xc1, [@local, @remote, @local, @multicast1]}, @lsrr={0x83, 0x7, 0x76, [@multicast1]}]}}}], 0x120}, 0x8000)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xee01}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
sendfile(r0, r4, &(0x7f0000000080)=0x7ff, 0xffffffffffffa635)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000700)={0xa, 0x4e24, 0xaddc, @empty, 0x9}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000740)="5a4091042d23f5346c799b0a3635bf2a0881faa3f2a7bdd43e32fc40f301d9af4450ed326a1ce1e9b20cfcedf98c6801b8b288e6e4ead03a39995b116bfdfc6f716b1a2790ef493bb5f5c9365649decb520849f40957d3d6a3fc125c53db490e221c694a4bf6bca5747b46bf529f80126b870662ff790ca678ccb6dc6c4778d37d49940679a40af889df8587b27a2e07192ba9d90553b44fced29ecb40fb0161e6891b232186d16df5e4d9324d4c1eb493668a0a149472a06ea9a02cb097aa5204340bd972872b6fb4c2b77638157808ccb47095f2e1b421c568d49d48e6bb09d42dab8ede9ef44f716692f296f716ca031da9021ee6dd18a68cf518d15f648fd6f082e0f7c4cc8ec779fedd8bc50ef424a619a2865ab5e51e5346b40f1c53e36bfbf14594059fab83883857a9cce254541be69618882cadbb8d4a8aacc96ee556e4e4c7c86151b48b22c09dec81c609b0e9c66b48674a048131ad7b131ad693b605878614059e36540c620e7d5f3c122bbecc46752cb71ab203f2d045b71113da954e5880b681a99fe275fc84202ba1599ead3988e90c6aa38ec21333d5f183f6feabe3bea1078b5d80aec3c20c7976d3878bb901318794bcc1c30c76643df41000389424d0d5f740df1aa67ebe370dc8ff859ae32063cb083808528eebf52ac52316cbd0c108cdc579dc743d418a3820585faff955da23880ac0cd35a49f3d94673448da52597d240cdda346929c818a5120ca6b4d8f2a9412fb4cc4366c5bf04ce657889b10919d510fe90524ede2e80caa32b779660065372e909e46a223a044d6a825a6972496099eded5ba0c86fb8bddb4ac1fdc9eed7ccac02611c2204a41edf48f3d9cb77e1d3ce4b1d244de15b0a97a2dd2dadd69514d5510570e816218f0366257166927aef1eb5dadb8c9c6627b324351f1bb42fbf3e1f9818f9c0c73c63e29d225c1606cc4185d12a1438c40f2b53a9278ab8870dc019f0b1b9c923cd2d6b0bed6fc0f038016abf676a87c1663380d30774dc4f6bc86eef692b4565c06fe3eee18ecaa8ebfbaccbdf20e556efd1b1e8410d7a064441d6f3ea371c13b7b8135cac2cf07623d0d19545933a41f7249dd4df3c827c4388d3bf1e5a1b6952a925197bd43ed4b8833613d3e391060e1d9393cbdd6fa71ef58d0c12ec10f949b88d0abc9d867f829c588b511a5404a47f58f02bf3eb08c21703e3949e2777e6cd47979aea317eb5956853405e6c663e4744e4422ba0ac4d24b0005b6b0d907f63d7fcd7d5d66a1a8f721f3ab639c48ae09be8f04d1f771399db5cc920eaeaa2a439494057ddd0299e062bf8a3f85d2df0ea574d7a6f30ee8d83333a5574913c607bbd9c9cdb8ea7e5a60db1e465a5f83470367d988ff02d3c5cdbd0a503eca6fe4ef8fd916303af240a61997eb5303958ee84b58bc7b6ca1f390be40e90d0151bcbd26106d574e28062ae9b476f94df57db2bd5f7e90cb6eb47257486934dcb3961ab24533a8416bb74c72feada03b2f0eb2b462c57bf69e161f5767045d262bb29b4209824fd7e62d9a5bf94e196f4494deabcf51e327c55e6928f3a60d75932148e980e34b8d2f6802dabbd4349748d82208a342b513371e8df290f533adbb6c105ed5c00c1aaed870eee79fbd8339adb6e6cde3949432473dc3164ca773f1d4b056b39bdb95500e58c1528e9a8b5fd6637033f3f9a8c3bff125e0d48173c66e4c412c55c42ff299ab7711bb07f28ef4d995b7321e053f8fb16f5c805f4b95e69f19d10136f1ed31738687d0b3b9fdb235e04a1c12241cecc136b6a35f1a41bf610d0cb8284085fe053102cc29ffb68c4e36d198dd344fc712468647b3cc24a53c89ba6f8111e21aabe800c5809715c0c791000a2964c85aadde275409a73a6efccba10c533bb06bd41266bd735a424a36ab19aae693f4566b3dccbb8995f07a5fa07ad6b32035dfb3c25b97c57fbf706f3bb1a7a8841b6b59e77b71695e2a9a6fdf4c918d3d46995bcb2ba0561487f4a8cd35d032fc727e999eaff633580c0a597fbf35dbbe5abbfd4f695797ef6881d66f956427fd058e47a2a4ca0c0660d84f11144bde53fe48f4f70ca63865e714b36ffb361a967bf29e6128ebc2fd2f0ec157f21dd4c7fc61825dd2f9c90e555475a3ebc873708ea2fd0595357bddfd91473b5d281fac057fac4c753b763e28e73438b400c61118b831ab894be0f0077165180389835c8fb0a3308ce0a63613270d1611ba7155d7afd7b5393e90ef7c0450a0a830441ca56f7345c97a589f3622b955871c79f42e412915fb73bfc516ff70461970f80e9a1f4020b3c5087f13a337be1f0ba222d4a736fc2c8f747816d923b46e5ae9133b67dd58941cac996cdd4ed1a4c8872c5466f1c3d088c682c62236b25085a718290cd992edc96577edeab528d1a25ca01cc3e3f0f577cd2a11b06a5652e0f2576508690276d86255de82e1f353ca5e16718b3a84ec3f54f4d1f873892f0851c86eece18600e56ffcabe6f58f3a87b2070f3a2599a97a6dbae205ab293fc65ec37ee66450942fc1dab460027a2e57d0e26bf6a48c20f6af3cad7528608e7930b8aac3304366913d6fe4e1071c4a218fc2eb411f00b1ec2c3c1cb240df1748ab5e864a355e86ecf78da1b1e59bbdba55600966a529e92894995e9730c60db05cfef334732be224737651653642dff7a548d6ac65c66866912c254f2cf22da01d843c7f9036c1ac278939dd6a23be98bfb26de84604ac9dc3e60769a8f0def80338972878588143e209ccfdce505c37199b6e9449a54e765f56f24c8b30ff85c3927fcf863e87baf78c9a80ec1cfefa640dc3bff0e473df378cef4d622d85e108a5b0cc5766254353dbe97ac6a9596104c346088b907c343e7c070566b4c415450cc20c898ff04069d53bb974418d66c36451c688081aa13521b3047116c60daacf2b5fedb033595c965160e42497a80fabab4925582f288e6d7da638fa3a1fe98c246e9ef2f97afa819191562ba88ab839018450ca9401caf51ee8ed43c3dc665ae0b5b21a655f67bd8193d0e5c7d4c175b625dffc77c2157ae7b77d39cc625434f879ddf2a60e9da55432663eac9ff6f4341335c974519ba38e897e125403b56421e12e0f7f043df909c1be300c57ec3279c03d73cb4008f9083d44e8c15546b3bbaeb5fd6a57f673fa290aaa3ba2a7983ab6ccb3cefb320d65bd355b77e80e9f75a01784011f78a4693e1f07f50d0d5c0ba29027eeecc51afe202d162e00792dd01f9b785ae2ac2b67bd2e375721b662d0a5fc7e06be6b7a86a610c7217fbe286cbac8fee17cf714a494f8c5e025241b5b65e4daef874d2e8fc4e9132de8717e978ccf253e9e253a5373367281ec26f8c64a08486d6735dd863cbb95f2064e372065d4e4fa55dc7e5520631b9a94bfd2518442d311149c1432a9f35e5ef78d6c38e769458db532fa5befd4c85a5b25407618798eded34bb95894127d8757fe7d3f6a72bbb56cdf3c5573243bcda964bfcbc60b1738139e9c913a88cce06955e066ecec20983fb65a5e3e8023e0669d1c6020741d64fc831bc3261b384b5826e417caec8d5ff6846bebcfe1f4f4369a7c88bba5c322c406800d122efefff946a48584fa116bd1f59217cc708a4e479ce7c21ac5e9eeba399e77f2ed2ebc1ab4353257e48339fe4a05fb73c30ec1868d82e85d9f3cde1808e66207c27ea6e9cad4e8b2cc091d436236a8556d427431acb887221d4c5a7c1b2c40ba27fb88c7f8e80450d9f989d73d7196fa7e48fcb56b9ffda86eee8630778f83c73729294564ea323e35752d6eabed7516ce8b076ea239b65d3f986e1c22b0a094e90ee744e749ae140a7308d954dc4baec0ba084090ff018f3506bd8061fd2542b7e818340444747ee17077a0d1202f611f4fa1a2de0c0545e963e2adba9e11dc784c86349b95953d121b2c01a1d74d2965c8d8414d5bf74d9360defa9a12f569e235f7a99abb5db7cb24c860be0f41cb423b55ec2cc065c3f7c65173cbfecf5cb531df94fb579677173040e42d33c8829d29d064b2eeecfe0ab37e6b0cb0c330ce3af6d0250222ffe2a05c56bd7225810eb88bb446d67779dabbf5e35d6056d66b9c43ee5e7dd8229a782f07a782e96ef17f1c3e29c88e00cfe0b7f452c417a6c29fc8bbded85ac6a74f6a7d441c247b8c184e4d61bf50161924fc7a9c3ab25f2afb7478ed3ac685837d3794567623d7066afa0e3cae94b75c78da3db6da190644b2c15677b065d5742f5c9afeb71e885e517dd70655c9b751f38413b403c923c07e472e0e16f46e8b761815a7168de5a4d3a8ab7411ae0fcbf1ee77bbfa6c5fa6ec1fd6be8cc56a0849cdbd37ef8619a5afdf5c68658268ce033867fc5049ca9823a4abcc92ad51e3900508cd2a3d508095987cb15b780a957c2cc400f05ae4bbe882f748cab8d88b69a903d7f780a525c270914caebdc7c2046562d7ca8453800eb1d259cb5a718a458deb75752dc760b9e3dfd620979d0b893368a51e75d79cae99d0745c1f728408de01fa4d37dab58325553dc635f90285687364a623e6f9330119224a711c1f37685fb1448f20a19e2c2031745de4d2ddfa52c096304ad28f32f2f740fe6db0e54f17af4dd5974f41682cf67459d3c4fa5fd329817e55b18897e1c23894fe2c7f6130012a1a98aec7ece968c4743307fa923bc548aa76f48c1790f52326b982d4ca425406a92d1aaf2cb0d5c01bfa71c6c92ebb5c323d02bde3e3a0dde363d946a409872bb1681a39c582b8d2d896b5c63ec0a6df06b59d06c9331247988a26c17dce9c4d19bfac9329cf5240174c396a644316cc6162da1c6c0b4ca96588ec8b6424711996c78ed5fadd92be8f5238dcb958e945d1e2f83f4ede376c98afce4c6e609c6ea012006c124cbf605a2a250373ebb2bd7e0515ac544b5860c6179a5edc25e68928329e85e847ef9ac34cd7151ac5c0081afbbce58d8b9e0996f85d02e5a1d5aa0522caefcd5bbb8541cd4e67d9a1dbc6f3973717fc4705503b01232f78a3f04efd0b6dffd6f8a1124fae2229fafd6bb48944942240d9242e4af7b13e8ee9b1e81fb1e1ee9a533e89da83315d12811d6e0deddfdb05a4613b969029cd60c8e5dae4908f8094ea39699535565e5a590d514e71e76167d399ac40630ccddce5d634c5aa8845b23e45c056647b143939c908adc0accc69e85b17aa209606289c339de60611ba79d570ce12348c24f36174bbe32eea3381c7703f0f73e23ee487822695527890bbff3aaf772e2bfb106e51f6535cfb82635b167739e694cf064be23262a3c8853da0fa1628881c00c1b4ef6bdca841505741134a0b4e9164008f3bedcf7ab5a0c463ac35a6a281906a8bbf4a81a1d163c042b7dbf8c5d52c69d4ef13a1a91b5d6d3a0e3a4a3d878ba3dc4a1434f63f6f18f842132e6ee58a88ac42fad42be3c143714e81131dd5ab914e80e233f24013e192933df78a698075c1cef2065c2e4808fb19ba0e5a8a89a08a4a6430961926625623cd67c1b5b78e5b8328eafc39d34bd0980de0485e9f08a12e81abb937a0d6a7626c79d93846578e3f7235c770d97c3fa877121be66035e4f865dae8c3f59e19b25432eb7b302e7a8c2623fd67afb5399948d5c43a20fe8b6688dc325842c4ce46d3399df0a9c9adbc6bb600ef2452b69b2ec47251f8131d1743943dc034908a4a609f1414812532cd86326b7e3b2ee9ffa29d432a4bbdead40dd0c8ba037ffbd045e574eff0f107f9605d810ee3af7fa212051ec849171b", 0x1000}, {&(0x7f0000001740)="b7556fa8c69ad452e59c63b189657346d37c27b60892065f", 0x18}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="5cf69110704ce17be579701fba4d66f98504fde10e6f9d18d50b45f243225187c2893d742b900d4c54bb328a022d90d8476f9d95ef1f0369727c8aeaafb4f90f0c6c7e1f7aad6ffee3059286ec88ba894e328ca7d2f315313defab364ac774fd4d5f15a3757ddd7a3e073be847291bbeddf66a6858e0d783478a8849d58a3bccdb980b5fcf834fe6daace2921606d5bf2b3365780a800a8f9d37b5b12ae293b56a2c62cc580daecd464e5b79799446bafd49a6f8", 0xb4}], 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="140000000000000029000000340000008100000000000000100100000000000029000000360000002c1e0000000000000108000000000000000000010004013f04018004010804010803dcf89aeecf94fa4df511e03c930fa2dcc25d6ee55d18a1f4421c8724d369c9539e54f16b858f8b3684d7ab31d5d4f9fdffffff008a450db17a27d561a1502778119ae1725b171164296ba59ae2659f47979142bd2dde78a40d3daf0caee8621698e16115735bf7f4e4374f3f62ecf6f11201da3e173b099cbd4073a08964875228c8582cac0b966603a98e5eab719698899992c589d1737fee730f90caaf03a5eb093f40d8310d64b6d7d1deaa9f1c5cc6220a819bb735576ae56a054eb2e376097670fb09b82205eb329c3b4898b626df6135bbae5e8dac95e60d9b9600140000000000000029000000430000000800000000000000"], 0x140}, 0x8004)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
clock_gettime(0x0, &(0x7f0000000680)={<r9=>0x0, <r10=>0x0})
recvmmsg(r8, &(0x7f0000000600)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/101, 0x65}], 0x2, &(0x7f0000000440)=""/219, 0xdb}, 0x400}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/126, 0x7e}], 0x1}, 0x1}], 0x2, 0x100, &(0x7f00000006c0)={r9, r10+10000000})

[ 2914.417928] 9pnet: Insufficient options for proto=fd
13:49:14 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe0ffffff00000000)

13:49:14 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x311000, 0x6)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x638500, 0x103)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xff, 0x1})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:14 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88)

13:49:14 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r2, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8c0, 0x1}, 0x40000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0x2697, &(0x7f0000000040)={0x0, 0xd444, 0x20, 0x1, 0x27b, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r7=>0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r12}}, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x5, 0x9, &(0x7f0000000300)=[{&(0x7f0000000240)="11408f0d7e7281738600911a4585", 0xe}, {&(0x7f0000000280)="f950a3fcf71f04f1af1d2af9fd5ca1f3f736", 0x12}], 0x2, 0xd, 0x1, {0x1, r12}}, 0x0)

13:49:14 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 2914.560786] FAULT_INJECTION: forcing a failure.
[ 2914.560786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2914.561896] CPU: 1 PID: 42732 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2914.562487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2914.563186] Call Trace:
[ 2914.563422]  dump_stack+0x107/0x167
[ 2914.563739]  should_fail.cold+0x5/0xa
[ 2914.564075]  _copy_from_user+0x2e/0x1b0
[ 2914.564447]  __copy_msghdr_from_user+0x91/0x4b0
[ 2914.564846]  ? __ia32_sys_shutdown+0x80/0x80
[ 2914.565234]  ? __lockdep_reset_lock+0x180/0x180
[ 2914.565637]  ? unwind_next_frame+0x13ef/0x1a90
[ 2914.566033]  sendmsg_copy_msghdr+0xa1/0x160
[ 2914.566401]  ? do_recvmmsg+0x6d0/0x6d0
[ 2914.566745]  ? __is_insn_slot_addr+0x123/0x290
[ 2914.567139]  ? mark_lock+0xf5/0x2df0
[ 2914.567463]  ? mark_lock+0xf5/0x2df0
[ 2914.567793]  io_sendmsg+0x62c/0x830
[ 2914.568108]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2914.568514]  ? __is_insn_slot_addr+0x14c/0x290
[ 2914.568906]  ? lock_chain_count+0x20/0x20
[ 2914.569264]  ? mark_lock+0xf5/0x2df0
[ 2914.569584]  ? register_lock_class+0xbb/0x17b0
[ 2914.569974]  ? arch_stack_walk+0x99/0xf0
[ 2914.570325]  ? lock_chain_count+0x20/0x20
[ 2914.570657] 9pnet: Insufficient options for proto=fd
[ 2914.570693]  ? __lock_acquire+0xbb1/0x5b00
[ 2914.571578]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2914.572029]  ? __lock_acquire+0xbb1/0x5b00
[ 2914.572415]  io_issue_sqe+0x3b3/0x77b0
[ 2914.572756]  ? perf_trace_lock+0xac/0x490
[ 2914.573122]  ? io_connect+0x610/0x610
[ 2914.573450]  ? do_raw_spin_lock+0x121/0x260
[ 2914.573826]  ? lock_acquire+0x197/0x470
[ 2914.574167]  ? find_held_lock+0x2c/0x110
[ 2914.574522]  ? __fget_files+0x2cf/0x520
[ 2914.574866]  ? lock_downgrade+0x6d0/0x6d0
[ 2914.575224]  __io_queue_sqe+0x90/0x9d0
[ 2914.575562]  ? perf_trace_io_uring_register+0x500/0x500
[ 2914.576020]  ? io_issue_sqe+0x77b0/0x77b0
[ 2914.576393]  ? __fget_files+0x2f8/0x520
[ 2914.576748]  io_submit_sqes+0x44aa/0x8610
[ 2914.577126]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2914.577553]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2914.577970]  ? lock_downgrade+0x6d0/0x6d0
[ 2914.578325]  ? find_held_lock+0x2c/0x110
[ 2914.578679]  ? io_submit_sqes+0x8610/0x8610
[ 2914.579059]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2914.579479]  ? wait_for_completion_io+0x270/0x270
[ 2914.579897]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2914.580315]  ? vfs_write+0x354/0xb10
[ 2914.580641]  ? fput_many+0x2f/0x1a0
[ 2914.580957]  ? ksys_write+0x1a9/0x260
[ 2914.581286]  ? __ia32_sys_read+0xb0/0xb0
[ 2914.581640]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2914.582092]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2914.582540]  do_syscall_64+0x33/0x40
[ 2914.582862]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2914.583301] RIP: 0033:0x7f2774755b19
[ 2914.583627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2914.585207] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2914.585867] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2914.586474] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2914.587090] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2914.587699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2914.588326] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:49:14 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r8, 0x0, &(0x7f0000000340)="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", 0x1000, 0x11, 0x1}, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff7f00000000)

13:49:30 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+\"'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:49:30 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache, 0x22}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:49:30 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x4010, r0, 0x8000000)
syz_io_uring_setup(0x250c, &(0x7f0000000040)={0x0, 0x37fd, 0x20, 0x0, 0x23, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x8}, 0x1}, 0x9)

13:49:30 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r7, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r8}}, 0x3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:30 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 2930.738709] 9pnet: Insufficient options for proto=fd
13:49:30 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89)

13:49:30 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000080)={{r4}, 0x2, &(0x7f0000000040)=[0x5, 0x1], 0x59, 0x5, [0x9, 0xf2, 0x6, 0x8]})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)

[ 2930.821552] FAULT_INJECTION: forcing a failure.
[ 2930.821552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2930.822757] CPU: 0 PID: 43052 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2930.823400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2930.824171] Call Trace:
[ 2930.824427]  dump_stack+0x107/0x167
[ 2930.824788]  should_fail.cold+0x5/0xa
[ 2930.825150]  _copy_from_user+0x2e/0x1b0
[ 2930.825530]  __copy_msghdr_from_user+0x91/0x4b0
[ 2930.825964]  ? __ia32_sys_shutdown+0x80/0x80
[ 2930.826388]  ? __lockdep_reset_lock+0x180/0x180
[ 2930.826826]  ? unwind_next_frame+0x13ef/0x1a90
[ 2930.827257]  sendmsg_copy_msghdr+0xa1/0x160
[ 2930.827660]  ? do_recvmmsg+0x6d0/0x6d0
[ 2930.828031]  ? __is_insn_slot_addr+0x123/0x290
[ 2930.828466]  ? mark_lock+0xf5/0x2df0
[ 2930.828823]  ? mark_lock+0xf5/0x2df0
[ 2930.829176]  io_sendmsg+0x62c/0x830
[ 2930.829519]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2930.829939]  ? __is_insn_slot_addr+0x14c/0x290
[ 2930.830365]  ? lock_chain_count+0x20/0x20
[ 2930.830757]  ? mark_lock+0xf5/0x2df0
[ 2930.831106]  ? register_lock_class+0xbb/0x17b0
[ 2930.831532]  ? arch_stack_walk+0x99/0xf0
[ 2930.831916]  ? lock_chain_count+0x20/0x20
[ 2930.832307]  ? __lock_acquire+0xbb1/0x5b00
[ 2930.832731]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2930.833222]  ? __lock_acquire+0xbb1/0x5b00
[ 2930.833621]  io_issue_sqe+0x3b3/0x77b0
[ 2930.833992]  ? perf_trace_lock+0xac/0x490
[ 2930.834383]  ? io_connect+0x610/0x610
[ 2930.834740]  ? do_raw_spin_lock+0x121/0x260
[ 2930.835146]  ? lock_acquire+0x197/0x470
[ 2930.835517]  ? find_held_lock+0x2c/0x110
[ 2930.835902]  ? __fget_files+0x2cf/0x520
[ 2930.836277]  ? lock_downgrade+0x6d0/0x6d0
[ 2930.836683]  __io_queue_sqe+0x90/0x9d0
[ 2930.837050]  ? perf_trace_io_uring_register+0x500/0x500
[ 2930.837547]  ? io_issue_sqe+0x77b0/0x77b0
[ 2930.837931]  ? __fget_files+0x2f8/0x520
[ 2930.838315]  io_submit_sqes+0x44aa/0x8610
[ 2930.838725]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2930.839188]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2930.839646]  ? lock_downgrade+0x6d0/0x6d0
[ 2930.840031]  ? find_held_lock+0x2c/0x110
[ 2930.840416]  ? io_submit_sqes+0x8610/0x8610
[ 2930.840845]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2930.841297]  ? wait_for_completion_io+0x270/0x270
[ 2930.841753]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2930.842189]  ? vfs_write+0x354/0xb10
[ 2930.842543]  ? fput_many+0x2f/0x1a0
[ 2930.842886]  ? ksys_write+0x1a9/0x260
[ 2930.843243]  ? __ia32_sys_read+0xb0/0xb0
[ 2930.843628]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2930.844118]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2930.844615]  do_syscall_64+0x33/0x40
[ 2930.844963]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2930.845446] RIP: 0033:0x7f2774755b19
[ 2930.845793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2930.847491] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2930.848200] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2930.848878] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2930.849536] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2930.850194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2930.850853] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:49:30 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:30 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd=r3, 0x5}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(r5, &(0x7f0000001740)={&(0x7f0000000080), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/234, 0xea}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000001500)=""/70, 0x46}, {&(0x7f0000001580)=""/55, 0x37}, {&(0x7f00000015c0)=""/30, 0x1e}], 0x9, &(0x7f00000016c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0xd64e332fc1b1f5f9)
ioctl$FIOCLEX(r6, 0x5451)

13:49:30 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 2930.910166] 9pnet: Insufficient options for proto=fd
13:49:30 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x3, 0x4004, @fd=r3, 0x1000, &(0x7f0000000080)=[{&(0x7f0000000040)="d98ed6a709cb21cc0d9a43467c8164", 0xf}], 0x1, 0x3cfa3a6f83161bd1, 0x1, {0x1, r8}}, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(0x0, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(0x0, r9, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x6, 0x7, {0x0, r10}, 0x2, 0x0, 0x1, {0x0, r8, r11}}, 0x20)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r12, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:30 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x2)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4, 0x100000004}, 0x0)
close(r3)
io_uring_enter(r0, 0x6a87, 0xfdb2, 0x1, &(0x7f0000000080)={[0x9]}, 0x8)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+,'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:49:47 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x22, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:49:47 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:49:47 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x125201, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x80000000, 0x10, 0x0, 0x2df}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000240)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
socketpair(0x1a, 0x1, 0x9, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x400000a3, 0x0, {0x2, r8}}, 0x7fffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x141140)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x20010, r0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000280)=0xfa95, 0x4)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90)

13:49:47 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r7}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x22, 0x1, {0x1, r7}}, 0xffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x70)
syz_io_uring_setup(0x3eda, &(0x7f0000000040)={0x0, 0xc835, 0x8, 0x2, 0x2c2, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xc6e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2947.075817] 9pnet: Insufficient options for proto=fd
[ 2947.088946] FAULT_INJECTION: forcing a failure.
[ 2947.088946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2947.090080] CPU: 0 PID: 43518 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2947.090716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2947.091475] Call Trace:
[ 2947.091730]  dump_stack+0x107/0x167
[ 2947.092072]  should_fail.cold+0x5/0xa
[ 2947.092432]  _copy_from_user+0x2e/0x1b0
[ 2947.092833]  __copy_msghdr_from_user+0x91/0x4b0
[ 2947.093266]  ? __ia32_sys_shutdown+0x80/0x80
[ 2947.093685]  ? __lockdep_reset_lock+0x180/0x180
[ 2947.094118]  ? unwind_next_frame+0x13ef/0x1a90
[ 2947.094544]  sendmsg_copy_msghdr+0xa1/0x160
[ 2947.094944]  ? do_recvmmsg+0x6d0/0x6d0
[ 2947.095313]  ? __is_insn_slot_addr+0x123/0x290
[ 2947.095737]  ? mark_lock+0xf5/0x2df0
[ 2947.096083]  ? mark_lock+0xf5/0x2df0
[ 2947.096433]  io_sendmsg+0x62c/0x830
[ 2947.096795]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2947.097212]  ? __is_insn_slot_addr+0x14c/0x290
[ 2947.097635]  ? lock_chain_count+0x20/0x20
[ 2947.098026]  ? mark_lock+0xf5/0x2df0
[ 2947.098372]  ? register_lock_class+0xbb/0x17b0
[ 2947.098795]  ? arch_stack_walk+0x99/0xf0
[ 2947.099173]  ? lock_chain_count+0x20/0x20
[ 2947.099561]  ? __lock_acquire+0xbb1/0x5b00
[ 2947.099965]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2947.100454]  ? __lock_acquire+0xbb1/0x5b00
[ 2947.100868]  io_issue_sqe+0x3b3/0x77b0
[ 2947.101241]  ? perf_trace_lock+0xac/0x490
[ 2947.101631]  ? io_connect+0x610/0x610
[ 2947.101986]  ? do_raw_spin_lock+0x121/0x260
[ 2947.102390]  ? lock_acquire+0x197/0x470
[ 2947.102758]  ? find_held_lock+0x2c/0x110
[ 2947.103141]  ? __fget_files+0x2cf/0x520
[ 2947.103510]  ? lock_downgrade+0x6d0/0x6d0
[ 2947.103901]  __io_queue_sqe+0x90/0x9d0
[ 2947.104269]  ? perf_trace_io_uring_register+0x500/0x500
[ 2947.104789]  ? io_issue_sqe+0x77b0/0x77b0
[ 2947.105176]  ? __fget_files+0x2f8/0x520
[ 2947.105555]  io_submit_sqes+0x44aa/0x8610
[ 2947.105958]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2947.106416]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2947.106861]  ? lock_downgrade+0x6d0/0x6d0
[ 2947.107242]  ? find_held_lock+0x2c/0x110
[ 2947.107620]  ? io_submit_sqes+0x8610/0x8610
[ 2947.108026]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2947.108473]  ? wait_for_completion_io+0x270/0x270
[ 2947.108941]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2947.109371]  ? vfs_write+0x354/0xb10
[ 2947.109715]  ? fput_many+0x2f/0x1a0
[ 2947.110059]  ? ksys_write+0x1a9/0x260
[ 2947.110412]  ? __ia32_sys_read+0xb0/0xb0
[ 2947.110789]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2947.111271]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2947.111747]  do_syscall_64+0x33/0x40
[ 2947.112091]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2947.112562] RIP: 0033:0x7f2774755b19
[ 2947.112928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2947.114606] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2947.115306] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2947.115962] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2947.116616] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2947.117288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2947.117942] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:49:47 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000d88)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x2f37, 0x0, 0x0, 0x0, 0x0)

13:49:47 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91)

13:49:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r11}}, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x6000, @fd_index=0x9, 0x1, 0x0, 0x0, 0x8, 0x1, {0x1, r11}}, 0x9)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r12, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2947.263868] FAULT_INJECTION: forcing a failure.
[ 2947.263868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2947.265975] CPU: 0 PID: 43641 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2947.266612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2947.267377] Call Trace:
[ 2947.267632]  dump_stack+0x107/0x167
[ 2947.267975]  should_fail.cold+0x5/0xa
[ 2947.268341]  _copy_from_user+0x2e/0x1b0
[ 2947.268756]  __copy_msghdr_from_user+0x91/0x4b0
[ 2947.269964]  ? __ia32_sys_shutdown+0x80/0x80
[ 2947.270385]  ? __lockdep_reset_lock+0x180/0x180
[ 2947.270832]  sendmsg_copy_msghdr+0xa1/0x160
[ 2947.271232]  ? do_recvmmsg+0x6d0/0x6d0
[ 2947.271595]  ? lock_chain_count+0x20/0x20
[ 2947.271983]  ? __is_insn_slot_addr+0x123/0x290
[ 2947.272410]  ? lock_downgrade+0x6d0/0x6d0
[ 2947.272808]  ? mark_lock+0xf5/0x2df0
[ 2947.273154]  ? mark_lock+0xf5/0x2df0
[ 2947.273507]  io_sendmsg+0x62c/0x830
[ 2947.273847]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2947.274269]  ? mark_lock+0xf5/0x2df0
[ 2947.274622]  ? lock_chain_count+0x20/0x20
[ 2947.275011]  ? __lock_acquire+0xbb1/0x5b00
[ 2947.275417]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2947.275908]  ? __lock_acquire+0xbb1/0x5b00
[ 2947.276304]  io_issue_sqe+0x3b3/0x77b0
[ 2947.276682]  ? perf_trace_lock+0xac/0x490
[ 2947.277761]  ? io_connect+0x610/0x610
[ 2947.278769]  ? do_raw_spin_lock+0x121/0x260
[ 2947.279891]  ? lock_acquire+0x197/0x470
[ 2947.280940]  ? find_held_lock+0x2c/0x110
[ 2947.282006]  ? __fget_files+0x2cf/0x520
[ 2947.283036]  ? lock_downgrade+0x6d0/0x6d0
[ 2947.284111]  __io_queue_sqe+0x90/0x9d0
[ 2947.285143]  ? perf_trace_io_uring_register+0x500/0x500
[ 2947.286547]  ? io_issue_sqe+0x77b0/0x77b0
[ 2947.287621]  ? __fget_files+0x2f8/0x520
[ 2947.288669]  io_submit_sqes+0x44aa/0x8610
[ 2947.289771]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2947.291065]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2947.292318]  ? lock_downgrade+0x6d0/0x6d0
[ 2947.293409]  ? find_held_lock+0x2c/0x110
[ 2947.294468]  ? io_submit_sqes+0x8610/0x8610
[ 2947.295601]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2947.296869]  ? wait_for_completion_io+0x270/0x270
[ 2947.298123]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2947.299326]  ? vfs_write+0x354/0xb10
[ 2947.300300]  ? fput_many+0x2f/0x1a0
[ 2947.301263]  ? ksys_write+0x1a9/0x260
[ 2947.302254]  ? __ia32_sys_read+0xb0/0xb0
[ 2947.303314]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2947.304694]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2947.306047]  do_syscall_64+0x33/0x40
[ 2947.307031]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2947.308363] RIP: 0033:0x7f2774755b19
[ 2947.309336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2947.314159] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2947.316138] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2947.318017] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2947.319885] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2947.321752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2947.323609] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:03 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 2963.422946] 9pnet: Insufficient options for proto=fd
13:50:03 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+/'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:03 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = fork()
ptrace(0x10, r4)
ptrace$setsig(0x15, r4, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
r5 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x78, 0x80, 0x7, 0x1, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9ee}, 0x788, 0x10e, 0x8, 0x2, 0x100000000, 0x9, 0x7, 0x0, 0x7, 0x0, 0x3}, r4, 0x5, r0, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ppoll(&(0x7f00000000c0)=[{r8, 0x2080}, {r9, 0x120}, {r10, 0x200}, {r5, 0x2006}], 0x4, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x3f]}, 0x8)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:03 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x2c, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:03 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0)
io_uring_enter(r3, 0x1d5, 0x7faf, 0x1, &(0x7f0000000080)={[0xffffffffffffffdc]}, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7fffffff)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
io_uring_enter(r6, 0x1fe0, 0x3344, 0x1, &(0x7f00000000c0)={[0x1]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:03 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000080)=0x4, 0x4)
io_uring_enter(r0, 0x389c, 0x8e2a, 0x3, &(0x7f0000000040)={[0xffffffff]}, 0x8)

13:50:03 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92)

13:50:03 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2963.468278] FAULT_INJECTION: forcing a failure.
[ 2963.468278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2963.471641] CPU: 0 PID: 43874 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2963.473571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2963.475870] Call Trace:
[ 2963.476592]  dump_stack+0x107/0x167
[ 2963.477596]  should_fail.cold+0x5/0xa
[ 2963.478645]  _copy_from_user+0x2e/0x1b0
[ 2963.479748]  __copy_msghdr_from_user+0x91/0x4b0
[ 2963.481033]  ? __ia32_sys_shutdown+0x80/0x80
[ 2963.482242]  ? __lockdep_reset_lock+0x180/0x180
[ 2963.483521]  sendmsg_copy_msghdr+0xa1/0x160
[ 2963.484697]  ? do_recvmmsg+0x6d0/0x6d0
[ 2963.485770]  ? lock_chain_count+0x20/0x20
[ 2963.486903]  ? __is_insn_slot_addr+0x123/0x290
[ 2963.488165]  ? lock_downgrade+0x6d0/0x6d0
[ 2963.489309]  ? mark_lock+0xf5/0x2df0
[ 2963.490319]  ? mark_lock+0xf5/0x2df0
[ 2963.491337]  io_sendmsg+0x62c/0x830
[ 2963.492329]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2963.493560]  ? mark_lock+0xf5/0x2df0
[ 2963.494581]  ? lock_chain_count+0x20/0x20
[ 2963.495717]  ? __lock_acquire+0xbb1/0x5b00
[ 2963.496896]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2963.498340]  ? __lock_acquire+0xbb1/0x5b00
[ 2963.499508]  io_issue_sqe+0x3b3/0x77b0
[ 2963.500571]  ? perf_trace_lock+0xac/0x490
[ 2963.501725]  ? io_connect+0x610/0x610
[ 2963.502779]  ? do_raw_spin_lock+0x121/0x260
[ 2963.503978]  ? lock_acquire+0x197/0x470
[ 2963.505069]  ? find_held_lock+0x2c/0x110
[ 2963.506187]  ? __fget_files+0x2cf/0x520
[ 2963.507270]  ? lock_downgrade+0x6d0/0x6d0
[ 2963.508402]  __io_queue_sqe+0x90/0x9d0
[ 2963.509477]  ? perf_trace_io_uring_register+0x500/0x500
[ 2963.510931]  ? io_issue_sqe+0x77b0/0x77b0
[ 2963.512066]  ? __fget_files+0x2f8/0x520
[ 2963.513173]  io_submit_sqes+0x44aa/0x8610
[ 2963.514333]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2963.515698]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2963.517025]  ? lock_downgrade+0x6d0/0x6d0
[ 2963.518168]  ? find_held_lock+0x2c/0x110
[ 2963.519279]  ? io_submit_sqes+0x8610/0x8610
[ 2963.520466]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2963.521804]  ? wait_for_completion_io+0x270/0x270
[ 2963.523136]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2963.524401]  ? vfs_write+0x354/0xb10
[ 2963.525431]  ? fput_many+0x2f/0x1a0
[ 2963.526424]  ? ksys_write+0x1a9/0x260
[ 2963.527471]  ? __ia32_sys_read+0xb0/0xb0
[ 2963.528577]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2963.530018]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2963.531436]  do_syscall_64+0x33/0x40
[ 2963.532447]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2963.533883] RIP: 0033:0x7f2774755b19
[ 2963.534896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2963.539994] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2963.542100] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2963.544063] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2963.546022] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2963.547972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2963.549936] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:03 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7ffffffe)
io_uring_enter(r0, 0x31ab, 0xbfcc, 0x1, &(0x7f0000000300)={[0x9]}, 0x8)
pipe2(&(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x80000)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r7, &(0x7f00000007c0)=""/180, 0xb4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r6)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000401000000fedbdf2517000000180001801400020076657468305f746f5f7465616d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000051}, 0x2400c041)
io_uring_enter(r0, 0x21b00, 0x9c78, 0x0, 0x0, 0x0)

13:50:03 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7414, &(0x7f0000000040)={0x0, 0x6f49, 0x1, 0x3, 0x83}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000200))
ftruncate(0xffffffffffffffff, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r11=>0x0, &(0x7f0000000100)=<r12=>0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r13}}, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd_index=0x1, 0x100000001, 0x0, 0x0, 0x2, 0x0, {0x2, r13}}, 0xb)
r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd=r0, 0x6, 0x2, 0x400, 0x10, 0x1, {0x1, r14}}, 0x5)

13:50:03 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x2, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:03 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x22, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:50:03 executing program 1:
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x7c9e}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x10000000)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x0, @fd=r5, 0x3, 0x0, 0x0, 0xf, 0x0, {0x2}}, 0x986)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
recvmmsg(r6, &(0x7f00000040c0)=[{{&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/211, 0xd3}], 0x1}, 0x8}, {{&(0x7f0000000680)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/132, 0x84}], 0x2, &(0x7f0000000900)=""/27, 0x1b}, 0x8}, {{&(0x7f0000000940)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/246, 0xf6}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/33, 0x21}], 0x4, &(0x7f0000001c00)=""/97, 0x61}, 0x80000001}, {{&(0x7f0000001c80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001d00)=""/151, 0x97}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/233, 0xe9}], 0x3}, 0x7}, {{&(0x7f0000002f00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000002f80)=""/93, 0x5d}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/91, 0x5b}], 0x3}, 0x87dd}], 0x5, 0x10122, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x3]}, 0x8, 0x80800)
getsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000280), &(0x7f0000000440)=0x4)
ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='ip6tnl0\x00')
recvmsg$unix(r6, &(0x7f0000004980)={&(0x7f0000004200)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004280)=""/55, 0x37}, {&(0x7f00000042c0)=""/153, 0x99}, {&(0x7f0000004380)=""/226, 0xe2}, {&(0x7f0000004480)=""/195, 0xc3}, {&(0x7f0000004580)=""/48, 0x30}, {&(0x7f00000045c0)=""/228, 0xe4}, {&(0x7f00000046c0)=""/169, 0xa9}, {&(0x7f0000004780)=""/216, 0xd8}, {&(0x7f0000004880)=""/26, 0x1a}], 0x9}, 0x10000)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@private2, @in6=@local, 0x4e24, 0x5, 0x4e24, 0x2, 0x2, 0xa0, 0x20, 0x3a, 0x0, 0xee01}, {0x9c, 0xfffffffffffffffc, 0x3, 0x4, 0xd65f, 0x9a, 0x2, 0x2905029b}, {0x0, 0x3, 0x4, 0x7fff}, 0x3, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@remote, 0x4d3, 0x2b}, 0x5c747171be1b2fe6, @in6=@remote, 0x3506, 0x1, 0x1, 0x5, 0x4, 0x101, 0xae8}}, 0xe8)
close(r3)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:03 executing program 4:
r0 = syz_io_uring_setup(0x7c69, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x400039ea, &(0x7f0000000240)={0x0, 0xe4d6, 0x73f4ecffad4b8415, 0xffffffff, 0x1f4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r5, r9, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2}, 0x1}, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r10, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
io_uring_enter(r0, 0x58ab, 0x413e, 0x0, 0x0, 0x0)

13:50:03 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620a, &(0x7f0000000180)={0x0, 0xab7e, 0x0, 0x8002, 0x282}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_enter(r0, 0x24c0, 0xb16c, 0x1, &(0x7f0000000040), 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r0, {0x3}}, './file0\x00'})
fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x1)

13:50:03 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0xce97, 0x0, 0x0, 0x1b2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x125}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r5}, 0xfffffffd)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000300)=""/68, 0x44}], 0x3, &(0x7f0000001400)=""/102400, 0x19000}, 0x0, 0x140, 0x0, {0x3, r9}}, 0xa45f)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x519f, 0x7ffc, 0x3, &(0x7f00000006c0)={[0x9]}, 0x8)
select(0xff37, 0x0, 0x0, 0x0, &(0x7f00000013c0))
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x477c, &(0x7f0000000500)={0x0, 0x5a39, 0x1, 0x5803, 0x1dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r12}}, 0x3)
syz_io_uring_submit(r7, r11, &(0x7f0000000680)=@IORING_OP_CONNECT={0x10, 0xadde5c8d254fd08d, 0x0, r3, 0x80, &(0x7f0000000600)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x0, 0x0, 0x0, {0x0, r12}}, 0x3)

13:50:03 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0x10000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0xd9ea, 0x4, {}, 0x9, 0x9, 0x1, {0x0, 0x0, r0}}, 0x400)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x44040080}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
io_uring_enter(r0, 0x6bfc, 0xb7a3, 0x1, &(0x7f0000000040)={[0x9]}, 0x8)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'L+', 0x7}, 0x16, 0x1)
syz_io_uring_setup(0x2be, &(0x7f0000000200)={0x0, 0x9e8e, 0x0, 0x0, 0x386}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280))

13:50:20 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
io_uring_enter(r5, 0x58bc, 0xc2fe, 0x1, &(0x7f0000000040)={[0x8b]}, 0x8)

13:50:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x0, 0x40)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000080)={0x7, 'syzkaller0\x00', {0xf1}, 0x80})
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x220400, 0x178)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r12}}, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000000300)=0x80, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, 0x800, 0x0, {0x0, r12}}, 0x2)
mq_open(&(0x7f0000000200)='\x00', 0x800, 0x2, &(0x7f0000000240)={0x48, 0x10000, 0xdd9d, 0xff})

13:50:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93)

13:50:20 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x50981, 0x0)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r3, &(0x7f0000000080)={0x11}, r4, 0x3, 0x0, 0x1}, 0x0)
close(r3)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x50, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000840)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0), 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x238}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@remote}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @local, @private, @broadcast, @remote]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x9, "589a77a68f6d72"}, {0x5, 0xe, "f6cb2514b3697262f8251e7f"}, {0x1, 0x2}]}, @noop, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x4, "6b05"}, {0x1, 0x9, "b5f12bcb89500f"}, {0x5, 0x8, "18bd19a693e4"}]}, @lsrr={0x83, 0x23, 0x0, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xc1, [@local, @remote, @local, @multicast1]}, @lsrr={0x83, 0x7, 0x76, [@multicast1]}]}}}], 0x120}, 0x8000)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={r7, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:20 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r0, 0x8000000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x212941, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x7)
syz_io_uring_submit(0x0, r2, &(0x7f0000001440)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r5, 0x0, &(0x7f0000001400)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x1}, 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="9f9e83ab36f6af61f7d1899ea33c0f4727bff62e0ace47e25f895f02e1cec415904c36568d2e5e53587944c216e489903c3869a2bfdb9afe44a19f0ab0d4b01443c94d", 0x43}], 0x2}, 0x0, 0x4000, 0x0, {0x0, r9}}, 0x9)
syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd, 0x3, 0x0, 0x1000, 0x6}, 0x7)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x1)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r11, 0x0, r12, 0x2, 0x0, 0x1}, 0x4)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:20 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '\".'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:20 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}, 0x22}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:20 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x2c, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:50:20 executing program 4:
r0 = syz_io_uring_setup(0x7375, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x44004}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x10, r0, 0x8000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x10010, r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x810, r0, 0x10000000)
syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}, r3, 0x1, 0x0, 0x1}, 0x3)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2980.676748] FAULT_INJECTION: forcing a failure.
[ 2980.676748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2980.677794] CPU: 1 PID: 44315 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2980.678371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2980.679067] Call Trace:
[ 2980.679300]  dump_stack+0x107/0x167
[ 2980.679614]  should_fail.cold+0x5/0xa
[ 2980.679946]  _copy_from_user+0x2e/0x1b0
[ 2980.680291]  __copy_msghdr_from_user+0x91/0x4b0
[ 2980.680690]  ? __ia32_sys_shutdown+0x80/0x80
[ 2980.681070]  ? __lockdep_reset_lock+0x180/0x180
[ 2980.681516]  sendmsg_copy_msghdr+0xa1/0x160
[ 2980.681895]  ? do_recvmmsg+0x6d0/0x6d0
[ 2980.682236]  ? lock_chain_count+0x20/0x20
[ 2980.682602]  ? __is_insn_slot_addr+0x123/0x290
[ 2980.682997]  ? lock_downgrade+0x6d0/0x6d0
[ 2980.683361]  ? mark_lock+0xf5/0x2df0
[ 2980.683687]  ? mark_lock+0xf5/0x2df0
[ 2980.684015]  io_sendmsg+0x62c/0x830
[ 2980.684348]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2980.684772]  ? mark_lock+0xf5/0x2df0
[ 2980.685134]  ? lock_chain_count+0x20/0x20
[ 2980.685536]  ? __lock_acquire+0xbb1/0x5b00
[ 2980.685944]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2980.686430]  ? __lock_acquire+0xbb1/0x5b00
[ 2980.686819]  io_issue_sqe+0x3b3/0x77b0
[ 2980.687170]  ? perf_trace_lock+0xac/0x490
[ 2980.693271]  ? io_connect+0x610/0x610
[ 2980.693637]  ? do_raw_spin_lock+0x121/0x260
[ 2980.694045]  ? lock_acquire+0x197/0x470
[ 2980.694426]  ? find_held_lock+0x2c/0x110
[ 2980.694808]  ? __fget_files+0x2cf/0x520
[ 2980.695178]  ? lock_downgrade+0x6d0/0x6d0
[ 2980.695583]  __io_queue_sqe+0x90/0x9d0
[ 2980.695949]  ? perf_trace_io_uring_register+0x500/0x500
[ 2980.696445]  ? io_issue_sqe+0x77b0/0x77b0
[ 2980.696816]  ? __fget_files+0x2f8/0x520
[ 2980.697208]  io_submit_sqes+0x44aa/0x8610
[ 2980.697633]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2980.698084]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2980.698543]  ? lock_downgrade+0x6d0/0x6d0
[ 2980.698912]  ? find_held_lock+0x2c/0x110
[ 2980.699285]  ? io_submit_sqes+0x8610/0x8610
[ 2980.699706]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2980.700151]  ? wait_for_completion_io+0x270/0x270
[ 2980.700606]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2980.701031]  ? vfs_write+0x354/0xb10
[ 2980.701396]  ? fput_many+0x2f/0x1a0
[ 2980.701744]  ? ksys_write+0x1a9/0x260
[ 2980.702101]  ? __ia32_sys_read+0xb0/0xb0
[ 2980.702487]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2980.702964]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2980.703450]  do_syscall_64+0x33/0x40
[ 2980.703796]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2980.704260] RIP: 0033:0x7f2774755b19
[ 2980.704606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2980.706251] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2980.706952] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2980.707607] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2980.708248] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2980.708892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2980.709555] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:20 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000040)=0x1, 0x4)

13:50:20 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616e616d653d2c7375626a5f757365723d2f6465762f66756c6cf92c7063723d30303030303030303030303030303036303032392c6f626a5f757365723d2f6465762f66756c6c002c00"])
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:20 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @multicast2}, 0x1, 0x2, 0x0, 0x3}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)="26188b20fe1819ceb93ee3ea68076bb4e040c70e804a7af798927fdd151483d59b2e1069b447c820d8a140e35f5c40083f4f0271d4cff951823ae6864011743eb57f898ff4891d376ff489898cd84efa706421a1e6aee0e6020ebc4d9e4aed36c666fe499b6ca42388052a8ddd44a149ad28a26128421eb60a39ff2f492a37b9248a084307068aa123f386b24b415b683f75c4dfb1e832481bc6632117bbfa807380ce772222b2645b6fbff439690a5d7142db6831f2553f90bdd04f3ada0cc23f3e7548307c94c018ed7ab859c1e5dd61", 0xd1}, {&(0x7f0000000440)="6b20f387b0250d5d085fb1ba7fffeb2924f967bfbe8169173832b76f6fad513b231c241cb53ed559cf059404e71d8c53bfcddb65e0bf5c4efa04801a259c5340f7509f6cc72fb51cd4d9974a7dfe92885c9c80b99ecd7b0bb93feb9e37f2f8000b3f7109d1c940110f6e86eabefa04e9a141fa00c426eb85ce4c64c2a89af8501bb168c4d9cd971fba8d9008e5b09fd0453a65a817dd14f3b498658d6ddd69272aadd4137c5c291ec458519821038a", 0xaf}, {&(0x7f0000000500)="1a6eeff98b4d2fc92c2c5b88ba1f66c8cc58ad6fd56af97078f6cf4c3314acd8f4884a1d21ad117490fe6c2a4123fd2168c98b47aec034445db86050de7d554b5be024b72dbe9417e2996e5520a294e66b212f14830bddabce2b0aad9f25fdb0240fd2e9c9790974ef1883500e25941db869a26bc16ef4382d24ab0fae0fdf7ec5caf759945e24894861551a132285485529a67fa29529f9a21603a117fa9e882376c630a12d228c5c84dbec4e5a97973099070fd66b900bf3482829936e0066bc0c44315c4ecdbacd81c9c31c2921eb1a7278a9a9", 0xd5}, {&(0x7f0000000140)="1e8bda34bbf66935802102bcb8002626427149adbf1f1bbf32fe3b97", 0x1c}, {&(0x7f0000000180)="386d00bc7d461e6e", 0x8}, {&(0x7f0000000600)="b5bc3f897a056090e723745fff2f269ca8d680cb5ea308e1abe517aea883ff3c4c36f86242486be85af0ed1ac28dbff796066bc0f7feab57656b73dc8fa244f0ceb6d48c04d58d0be002b107c07302661924e777e8ccd10623779827a81f888e14b5c6cf4c39130da1ce8c500e2ff940d5360ae13504f5629851c73148478214d9615ffbd7fe959f678678df0135bd5587c8a9cf38314b889fcb63439f1a086d162137fc560ed6042cdf5183", 0xac}, {&(0x7f0000000240)="d49cd48eaa8dd447dc83c7167253ff", 0xf}], 0x7, &(0x7f0000000740)=[{0xa0, 0x1, 0x1, "2483724b198a2c5362beb59f5517dbf7fc51fb32d5f8a3ac733644282d74b34608a14851b7d98cd9be70bf70db351bbc9c78d0cbb6a27469f3d7a4f3b47e525de0fc9f76f6ce4ef701f01f8beb0d16a1fa30eac2945c4e18c366b17ca33633601047d809e356b3f0d3515099f9c033542736d6d5aaf91f585d8c1834ce929d8963b6c04cf8d499e4556d"}, {0x70, 0x0, 0x10000, "a471164014f82c8ede96feef757835feea20c03fc42fe25ad4e2392903b8435ef7e31c56c502628cda74c552b0100e5b8821943f35b6f6f04504cd2b5d15e10db5863ee61bcabaddbf6df82a0a3c38819a2d15a7253ae0b1cc054e343fa1e2be"}, {0x100, 0x107, 0x8, "ab900b69fa5adcde1a47cc6d2772a389453550ee7acce078afb59cc314cfb2789d234c26f87ad46a219d4e893ae63f27123b6a7f6879f3e4fc1936424cacbe36cdb3ec367fdfa22233805c3cffce87227eb91aed41d0d2449c09c583b9e2a7152e02bb6ca8946b3c506b374e40e537999f68e0324a95c2e47dda32449afe5819dcf28626716e90d40258c55e49967bec019157106b7d8c814e9e45e654d283ca331603778ac9e070cfba49f6a412a68d3e82eeb1c56cf74d6308abad8ad248eea5c6e8fb4e49c9b8db1a011c67cd00b6046796a0dfc42f142669cc4097f9a14dc5412ec32f05f42c6e0ab722"}], 0x210}, 0x0, 0x4000000, 0x0, {0x0, r7}}, 0xfff)

13:50:20 executing program 4:
r0 = syz_io_uring_setup(0x6147, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@loopback}, 0x0, @in=@broadcast, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0xe8)
syz_io_uring_submit(r4, r7, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000000080)=[r8, r3, r9, r3, r3, r10, r11], 0x7}, 0x2)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xfd)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:20 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94)

13:50:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000280)=0x7ff, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_setup(0x1a37, &(0x7f0000000040)={0x0, 0x806, 0x20, 0x1, 0x396, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd_index=0x4, 0xffffffffffffff80, 0x3, 0x4, 0x11, 0x1, {0x2}}, 0x5e)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2980.989879] FAULT_INJECTION: forcing a failure.
[ 2980.989879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2980.991140] CPU: 0 PID: 44358 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2980.991836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2980.992645] Call Trace:
[ 2980.992910]  dump_stack+0x107/0x167
[ 2980.993307]  should_fail.cold+0x5/0xa
[ 2980.993694]  _copy_from_user+0x2e/0x1b0
[ 2980.994097]  __copy_msghdr_from_user+0x91/0x4b0
[ 2980.994580]  ? __ia32_sys_shutdown+0x80/0x80
[ 2980.995026]  ? __lockdep_reset_lock+0x180/0x180
[ 2980.995508]  sendmsg_copy_msghdr+0xa1/0x160
[ 2980.995935]  ? do_recvmmsg+0x6d0/0x6d0
[ 2980.996339]  ? lock_chain_count+0x20/0x20
[ 2980.996760]  ? __is_insn_slot_addr+0x123/0x290
[ 2980.997249]  ? lock_downgrade+0x6d0/0x6d0
[ 2980.997667]  ? mark_lock+0xf5/0x2df0
[ 2980.998040]  ? mark_lock+0xf5/0x2df0
[ 2980.998424]  io_sendmsg+0x62c/0x830
[ 2980.998782]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2980.999259]  ? mark_lock+0xf5/0x2df0
[ 2980.999641]  ? lock_chain_count+0x20/0x20
[ 2981.000059]  ? __lock_acquire+0xbb1/0x5b00
[ 2981.000507]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2981.001031]  ? __lock_acquire+0xbb1/0x5b00
[ 2981.001497]  io_issue_sqe+0x3b3/0x77b0
[ 2981.001900]  ? perf_trace_lock+0xac/0x490
[ 2981.002336]  ? io_connect+0x610/0x610
[ 2981.002724]  ? do_raw_spin_lock+0x121/0x260
[ 2981.003166]  ? lock_acquire+0x197/0x470
[ 2981.003580]  ? find_held_lock+0x2c/0x110
[ 2981.003995]  ? __fget_files+0x2cf/0x520
[ 2981.004397]  ? lock_downgrade+0x6d0/0x6d0
[ 2981.004816]  __io_queue_sqe+0x90/0x9d0
[ 2981.005243]  ? perf_trace_io_uring_register+0x500/0x500
[ 2981.005781]  ? io_issue_sqe+0x77b0/0x77b0
[ 2981.006203]  ? __fget_files+0x2f8/0x520
[ 2981.006631]  io_submit_sqes+0x44aa/0x8610
[ 2981.007080]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2981.007585]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2981.008073]  ? lock_downgrade+0x6d0/0x6d0
[ 2981.008504]  ? find_held_lock+0x2c/0x110
[ 2981.008920]  ? io_submit_sqes+0x8610/0x8610
[ 2981.009400]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2981.009888]  ? wait_for_completion_io+0x270/0x270
[ 2981.010382]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2981.010850]  ? vfs_write+0x354/0xb10
[ 2981.011242]  ? fput_many+0x2f/0x1a0
[ 2981.011615]  ? ksys_write+0x1a9/0x260
[ 2981.012001]  ? __ia32_sys_read+0xb0/0xb0
[ 2981.012431]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2981.012958]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2981.013518]  do_syscall_64+0x33/0x40
[ 2981.013897]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2981.014421] RIP: 0033:0x7f2774755b19
[ 2981.014811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2981.016664] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2981.017462] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2981.018183] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2981.018919] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2981.019631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2981.020371] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:21 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x1, 0x0, 0x1, {0x0, r10}}, 0x2)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x30, r7, 0x0)
syz_io_uring_submit(r11, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x0, {0x0, r10}}, 0x3dbd6854)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:21 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:21 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
faccessat(r3, &(0x7f0000000080)='./file0\x00', 0x83)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:37 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x3)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r10, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7fff)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:37 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '\".'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:50:37 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, ',.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:37 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_setup(0x6c8a, &(0x7f0000000040)={0x0, 0x5b73, 0x20, 0x0, 0x3aa}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:37 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95)

13:50:37 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise, 0x22}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:37 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r3, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4020}, 0x1}, 0x5)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r7, &(0x7f00000007c0)=""/180, 0xb4)
openat(r7, &(0x7f0000000140)='./file0\x00', 0x60000, 0xe)
close(r6)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x810, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x1000)

13:50:37 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
ptrace(0x10, r1)
ptrace$setsig(0x15, r1, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r2, &(0x7f00000007c0)=""/180, 0xb4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x59, 0x1, 0xee, 0x7, 0x0, 0x0, 0x10800, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x7, 0x7}, 0x402, 0x80, 0x10000, 0x4, 0x967b, 0x2, 0x1, 0x0, 0x9, 0x0, 0x5ff}, r1, 0x2, r2, 0x2)
r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x3f, 0x1, 0x46, 0x5, 0x0, 0x8, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x8}, 0x40400, 0x100, 0x40, 0x0, 0x7, 0x2, 0x6, 0x0, 0x3, 0x0, 0x8001}, 0x0, 0xb, r0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000)
syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r8, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
syz_io_uring_setup(0xcc6, &(0x7f0000000040)={0x0, 0x852e, 0x20, 0x2, 0x183, 0x0, r8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200))

13:50:37 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2001008)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '^:\x00'}, &(0x7f0000000180)=""/39, 0x27)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3c8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2997.988259] FAULT_INJECTION: forcing a failure.
[ 2997.988259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2997.989445] CPU: 1 PID: 44686 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2997.990034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2997.990726] Call Trace:
[ 2997.990960]  dump_stack+0x107/0x167
[ 2997.991274]  should_fail.cold+0x5/0xa
[ 2997.991606]  _copy_from_user+0x2e/0x1b0
[ 2997.991953]  __copy_msghdr_from_user+0x91/0x4b0
[ 2997.992350]  ? __ia32_sys_shutdown+0x80/0x80
[ 2997.992735]  ? __lockdep_reset_lock+0x180/0x180
[ 2997.993131]  ? unwind_next_frame+0x13ef/0x1a90
[ 2997.997567]  sendmsg_copy_msghdr+0xa1/0x160
[ 2997.997975]  ? do_recvmmsg+0x6d0/0x6d0
[ 2997.998352]  ? __is_insn_slot_addr+0x123/0x290
[ 2997.998785]  ? mark_lock+0xf5/0x2df0
[ 2997.999137]  ? mark_lock+0xf5/0x2df0
[ 2997.999493]  io_sendmsg+0x62c/0x830
[ 2997.999839]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2998.000262]  ? __is_insn_slot_addr+0x14c/0x290
[ 2998.000690]  ? lock_chain_count+0x20/0x20
[ 2998.001083]  ? mark_lock+0xf5/0x2df0
[ 2998.001439]  ? register_lock_class+0xbb/0x17b0
[ 2998.001853]  ? arch_stack_walk+0x99/0xf0
[ 2998.002218]  ? lock_chain_count+0x20/0x20
[ 2998.002602]  ? __lock_acquire+0xbb1/0x5b00
[ 2998.003017]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2998.003504]  ? __lock_acquire+0xbb1/0x5b00
[ 2998.003891]  io_issue_sqe+0x3b3/0x77b0
[ 2998.004256]  ? perf_trace_lock+0xac/0x490
[ 2998.004645]  ? io_connect+0x610/0x610
[ 2998.004998]  ? do_raw_spin_lock+0x121/0x260
[ 2998.005420]  ? lock_acquire+0x197/0x470
[ 2998.005793]  ? find_held_lock+0x2c/0x110
[ 2998.006178]  ? __fget_files+0x2cf/0x520
[ 2998.006543]  ? lock_downgrade+0x6d0/0x6d0
[ 2998.006928]  __io_queue_sqe+0x90/0x9d0
[ 2998.007294]  ? perf_trace_io_uring_register+0x500/0x500
[ 2998.007782]  ? io_issue_sqe+0x77b0/0x77b0
[ 2998.008164]  ? __fget_files+0x2f8/0x520
[ 2998.008548]  io_submit_sqes+0x44aa/0x8610
[ 2998.008961]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2998.009435]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2998.009887]  ? lock_downgrade+0x6d0/0x6d0
[ 2998.010269]  ? find_held_lock+0x2c/0x110
[ 2998.010653]  ? io_submit_sqes+0x8610/0x8610
[ 2998.011064]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2998.011523]  ? wait_for_completion_io+0x270/0x270
[ 2998.011951]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2998.012368]  ? vfs_write+0x354/0xb10
[ 2998.012719]  ? fput_many+0x2f/0x1a0
[ 2998.013063]  ? ksys_write+0x1a9/0x260
[ 2998.013435]  ? __ia32_sys_read+0xb0/0xb0
[ 2998.013827]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2998.014283]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2998.014757]  do_syscall_64+0x33/0x40
[ 2998.015107]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2998.015575] RIP: 0033:0x7f2774755b19
[ 2998.015921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2998.017588] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2998.018290] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2998.018936] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2998.019584] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2998.020230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2998.020879] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:38 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r0=>0x0})
r1 = fsmount(0xffffffffffffffff, 0x0, 0x8)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6a5e, 0x4800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0xe4e0, 0x1, 0x8001, 0x5, 0x3, 0x2, 0x26, 0x0, 0x5, 0x0, 0x1}, r0, 0x1, r1, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r2, &(0x7f00000007c0)=""/180, 0xb4)
r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r2}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
fallocate(0xffffffffffffffff, 0x55, 0x5, 0x691)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000)
syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(r7, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000400)=@rc={0x1f, @none, 0x40}, 0x0, 0x0, 0x1}, 0x401)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x4, 0x80, 0x4, 0x4, 0x1, 0x5b, 0x0, 0x3, 0x81000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x383, 0x0, @perf_config_ext={0x2e, 0x9}, 0x4808, 0x7, 0xfff, 0x4, 0xd29b9a4, 0x10000003, 0xff, 0x0, 0x10001, 0x0, 0x7})

13:50:38 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
sendmsg$inet6(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="c438cea9c244bf721b65b11162554117cba0a3a4a922e392856f73a954efc29ecdca856fdee9bc39ad49d89dbad31575f05fbaf02feeffc35617f414bd61c7009a42f68b2dc9e2fcc3b042727b6e4b8b8b5cc8acc64b0a4891d86da0959c9176acd0857d8e784961d27979747844b139d02faa16cfed0847bdc2e20e61e3c4f05be918e1b893469eefb6a18b6e681de83edf15d74e3c29e8c38f523d9c22d4e9e5d51b0842eb9a4d73367bb93ae88d06b03505f69d9f7aa43000b5637802e2ea3c3c7726a9470246007c833dc2291391f1f33125f2", 0xd5}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000400)="42992a2de77730a25988fc2f93a9f50486aaab5b56fb74ed077c3b5f6273b5c9c2f0f6541c8ad2451fb9c5d034dfab8b703e113bd8a7d8d56cf9507d322d989cc4db9da89ec3ada59361ea72e964e0ce4ba929721872f75beeb230b67aa5d21e043a97be26aa457123aa2b9902ef465231522ebb2c246dbf1efb0b6fda7a1d93f63086dbb61907e322f153136183c24fea399d2f7d94714be7e6c9feb81140e9caa8218d6454ba5476ad5a1aca391bb9462075762e900d2ac370f0c91831c5a0fa3136bc69ba15da60cddc35fe32b05c0b68b37a570fe01aeb60", 0xda}], 0x3, &(0x7f0000000500)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x84, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x80}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7c}}], 0x90}, 0x8000)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_setup(0x331d, &(0x7f0000000040)={0x0, 0x910a, 0x5, 0x0, 0x74, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:38 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @loopback}, 0x8)

13:50:38 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96)

13:50:38 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x1ffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
fcntl$getown(r0, 0x9)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2998.205543] FAULT_INJECTION: forcing a failure.
[ 2998.205543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2998.206722] CPU: 1 PID: 44718 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 2998.207354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2998.208088] Call Trace:
[ 2998.208345]  dump_stack+0x107/0x167
[ 2998.208689]  should_fail.cold+0x5/0xa
[ 2998.209054]  _copy_from_user+0x2e/0x1b0
[ 2998.209444]  __copy_msghdr_from_user+0x91/0x4b0
[ 2998.209877]  ? __ia32_sys_shutdown+0x80/0x80
[ 2998.210298]  ? __lockdep_reset_lock+0x180/0x180
[ 2998.210727]  ? unwind_next_frame+0x13ef/0x1a90
[ 2998.211151]  sendmsg_copy_msghdr+0xa1/0x160
[ 2998.211554]  ? do_recvmmsg+0x6d0/0x6d0
[ 2998.211922]  ? __is_insn_slot_addr+0x123/0x290
[ 2998.212337]  ? mark_lock+0xf5/0x2df0
[ 2998.212677]  ? mark_lock+0xf5/0x2df0
[ 2998.213024]  io_sendmsg+0x62c/0x830
[ 2998.213377]  ? io_setup_async_msg+0x2d0/0x2d0
[ 2998.213847]  ? __is_insn_slot_addr+0x14c/0x290
[ 2998.214271]  ? lock_chain_count+0x20/0x20
[ 2998.214662]  ? mark_lock+0xf5/0x2df0
[ 2998.215004]  ? register_lock_class+0xbb/0x17b0
[ 2998.215411]  ? arch_stack_walk+0x99/0xf0
[ 2998.215791]  ? lock_chain_count+0x20/0x20
[ 2998.216186]  ? __lock_acquire+0xbb1/0x5b00
[ 2998.216597]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2998.217079]  ? __lock_acquire+0xbb1/0x5b00
[ 2998.217491]  io_issue_sqe+0x3b3/0x77b0
[ 2998.217861]  ? perf_trace_lock+0xac/0x490
[ 2998.218251]  ? io_connect+0x610/0x610
[ 2998.218599]  ? do_raw_spin_lock+0x121/0x260
[ 2998.218989]  ? lock_acquire+0x197/0x470
[ 2998.219351]  ? find_held_lock+0x2c/0x110
[ 2998.219727]  ? __fget_files+0x2cf/0x520
[ 2998.220080]  ? lock_downgrade+0x6d0/0x6d0
[ 2998.220455]  __io_queue_sqe+0x90/0x9d0
[ 2998.220820]  ? perf_trace_io_uring_register+0x500/0x500
[ 2998.221312]  ? io_issue_sqe+0x77b0/0x77b0
[ 2998.221757]  ? __fget_files+0x2f8/0x520
[ 2998.222162]  io_submit_sqes+0x44aa/0x8610
[ 2998.222571]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2998.223030]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 2998.223474]  ? lock_downgrade+0x6d0/0x6d0
[ 2998.223853]  ? find_held_lock+0x2c/0x110
[ 2998.224230]  ? io_submit_sqes+0x8610/0x8610
[ 2998.224998]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2998.225469]  ? wait_for_completion_io+0x270/0x270
[ 2998.225915]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2998.226348]  ? vfs_write+0x354/0xb10
[ 2998.226697]  ? fput_many+0x2f/0x1a0
[ 2998.227037]  ? ksys_write+0x1a9/0x260
[ 2998.227393]  ? __ia32_sys_read+0xb0/0xb0
[ 2998.227777]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2998.228262]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2998.228738]  do_syscall_64+0x33/0x40
[ 2998.229081]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2998.229611] RIP: 0033:0x7f2774755b19
[ 2998.229978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2998.231618] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2998.232310] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 2998.232956] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2998.233612] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2998.234248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2998.234891] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:38 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100002}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r5, &(0x7f00000007c0)=""/180, 0xb4)
getsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)

13:50:38 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
socketpair(0x21, 0x2, 0x3, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
sendto$unix(r8, &(0x7f0000000200)="933ba9fe2ced8fb79cb0c4073bd91cccce6d1b439a17db8965b224c1e39dd8cfc5fc2636ab65ca643fafb08e16195b890f16156558f9435660191b0385b25e552931d76ff85367768b64d55de7a4dd53", 0x50, 0x0, 0x0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x1}, 0xcfc)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:38 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x20000002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in6=@dev}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd=r4, 0x3, 0x5, 0x7, 0x15}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x1, 0x0, 0x0, 0x0)

[ 2998.370528] cgroup: fork rejected by pids controller in /syz7
[ 3014.199738] FAULT_INJECTION: forcing a failure.
[ 3014.199738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3014.201042] CPU: 0 PID: 45141 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 3014.201760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3014.202572] Call Trace:
[ 3014.202847]  dump_stack+0x107/0x167
[ 3014.203216]  should_fail.cold+0x5/0xa
[ 3014.203607]  _copy_from_user+0x2e/0x1b0
[ 3014.204007]  __copy_msghdr_from_user+0x91/0x4b0
[ 3014.204474]  ? __ia32_sys_shutdown+0x80/0x80
[ 3014.204915]  ? __lockdep_reset_lock+0x180/0x180
[ 3014.205394]  sendmsg_copy_msghdr+0xa1/0x160
[ 3014.209865]  ? do_recvmmsg+0x6d0/0x6d0
[ 3014.210260]  ? lock_chain_count+0x20/0x20
[ 3014.210683]  ? __is_insn_slot_addr+0x123/0x290
[ 3014.211143]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.211562]  ? mark_lock+0xf5/0x2df0
[ 3014.211938]  ? mark_lock+0xf5/0x2df0
[ 3014.212316]  io_sendmsg+0x62c/0x830
[ 3014.212685]  ? io_setup_async_msg+0x2d0/0x2d0
[ 3014.213141]  ? mark_lock+0xf5/0x2df0
[ 3014.213527]  ? lock_chain_count+0x20/0x20
[ 3014.213972]  ? __lock_acquire+0xbb1/0x5b00
[ 3014.214418]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3014.214922]  ? __lock_acquire+0xbb1/0x5b00
[ 3014.215338]  io_issue_sqe+0x3b3/0x77b0
[ 3014.215727]  ? perf_trace_lock+0xac/0x490
[ 3014.216139]  ? io_connect+0x610/0x610
[ 3014.216518]  ? do_raw_spin_lock+0x121/0x260
[ 3014.216961]  ? lock_acquire+0x197/0x470
[ 3014.217361]  ? find_held_lock+0x2c/0x110
[ 3014.217802]  ? __fget_files+0x2cf/0x520
[ 3014.218201]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.218632]  __io_queue_sqe+0x90/0x9d0
[ 3014.219028]  ? perf_trace_io_uring_register+0x500/0x500
[ 3014.219562]  ? io_issue_sqe+0x77b0/0x77b0
[ 3014.219976]  ? __fget_files+0x2f8/0x520
[ 3014.220376]  io_submit_sqes+0x44aa/0x8610
[ 3014.220822]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3014.221319]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3014.221832]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.222250]  ? find_held_lock+0x2c/0x110
[ 3014.222666]  ? io_submit_sqes+0x8610/0x8610
[ 3014.223111]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3014.223603]  ? wait_for_completion_io+0x270/0x270
[ 3014.224096]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3014.224566]  ? vfs_write+0x354/0xb10
[ 3014.224947]  ? copy_kernel_to_fpregs+0x9e/0xe0
[ 3014.225407]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 3014.225970]  ? ksys_write+0x1a9/0x260
[ 3014.226361]  ? __ia32_sys_read+0xb0/0xb0
[ 3014.226774]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3014.227295]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3014.227821]  do_syscall_64+0x33/0x40
[ 3014.228197]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3014.228708] RIP: 0033:0x7f2774755b19
[ 3014.229082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3014.230889] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3014.231642] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 3014.232341] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3014.233037] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3014.233764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3014.234475] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97)

13:50:54 executing program 4:
r0 = syz_io_uring_setup(0x6210, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x10, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = syz_open_dev$sg(0x0, 0x0, 0x2001)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, <r5=>0x0}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000580)={{}, 0x0, 0x16, @unused=[0x8000, 0x1, 0x6, 0x8e], @devid=r5})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r5, 0x7f, 0x187f, 0x1})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x40)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10010, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x22, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:54 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+\"'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:50:54 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, ',.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:50:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x2043, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0xfe02e98440de3139, r0, 0x10000000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0, 0x8000}, 0xf22)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = socket(0x2, 0x3f2d51b274657882, 0x10000)
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000080)=@srh={0x87, 0x2, 0x4, 0x1, 0x6, 0x0, 0x100, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x100)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x1806, 0x8d16, 0x2, &(0x7f0000000040)={[0x7]}, 0x8)

13:50:54 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x10000000000000}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000021000000180000003ffa2b1d4a40f1a4e2dfe6d0f0b9fa8e0d64a9581ff349524346844af478d6f50c322582dc19c677d59a8446f0eefaa5a93b772a6fbd0ffa7ab90cf72d7f1fbb9f2e4125094523cdfb2583656f76f0472a9181d405bc0a112b7a89bb56706bbdac1ea200873dc2254f12ed661fd53177ff523910bd0128c543417fb15adc63378b7368aa769b547cbff428fb991a494cc3bbf906c1c9187e5d3e89ed789cecc061abd5", @ANYRES32=r0, @ANYBLOB="000000001f0000002e2f66696c653000"])
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r8, 0x4)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r8, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r9, r7, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x40200, 0x28, 0x3}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0xfffffffc)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r11}}, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r11)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_io_uring_setup(0x423, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98)

[ 3014.426842] FAULT_INJECTION: forcing a failure.
[ 3014.426842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3014.428083] CPU: 0 PID: 45179 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 3014.428773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3014.429594] Call Trace:
[ 3014.429883]  dump_stack+0x107/0x167
[ 3014.430257]  should_fail.cold+0x5/0xa
[ 3014.430649]  _copy_from_user+0x2e/0x1b0
[ 3014.431058]  __copy_msghdr_from_user+0x91/0x4b0
[ 3014.431530]  ? __ia32_sys_shutdown+0x80/0x80
[ 3014.431985]  ? __lockdep_reset_lock+0x180/0x180
[ 3014.432466]  sendmsg_copy_msghdr+0xa1/0x160
[ 3014.432896]  ? do_recvmmsg+0x6d0/0x6d0
[ 3014.433285]  ? lock_chain_count+0x20/0x20
[ 3014.433726]  ? __is_insn_slot_addr+0x123/0x290
[ 3014.434183]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.434605]  ? mark_lock+0xf5/0x2df0
[ 3014.434981]  ? mark_lock+0xf5/0x2df0
[ 3014.435352]  io_sendmsg+0x62c/0x830
[ 3014.435716]  ? io_setup_async_msg+0x2d0/0x2d0
[ 3014.436171]  ? mark_lock+0xf5/0x2df0
[ 3014.436553]  ? lock_chain_count+0x20/0x20
[ 3014.436979]  ? __lock_acquire+0xbb1/0x5b00
[ 3014.437419]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3014.437963]  ? __lock_acquire+0xbb1/0x5b00
[ 3014.438393]  io_issue_sqe+0x3b3/0x77b0
[ 3014.438800]  ? perf_trace_lock+0xac/0x490
[ 3014.439228]  ? io_connect+0x610/0x610
[ 3014.439613]  ? do_raw_spin_lock+0x121/0x260
[ 3014.440046]  ? lock_acquire+0x197/0x470
[ 3014.440448]  ? find_held_lock+0x2c/0x110
[ 3014.440871]  ? __fget_files+0x2cf/0x520
[ 3014.441279]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.441726]  __io_queue_sqe+0x90/0x9d0
[ 3014.442130]  ? perf_trace_io_uring_register+0x500/0x500
[ 3014.442667]  ? io_issue_sqe+0x77b0/0x77b0
[ 3014.443081]  ? __fget_files+0x2f8/0x520
[ 3014.443498]  io_submit_sqes+0x44aa/0x8610
[ 3014.443953]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3014.444461]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3014.444950]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.445369]  ? find_held_lock+0x2c/0x110
[ 3014.445809]  ? io_submit_sqes+0x8610/0x8610
[ 3014.446261]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3014.446757]  ? wait_for_completion_io+0x270/0x270
[ 3014.447252]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3014.447711]  ? vfs_write+0x354/0xb10
[ 3014.448077]  ? fput_many+0x2f/0x1a0
[ 3014.448435]  ? ksys_write+0x1a9/0x260
[ 3014.448821]  ? __ia32_sys_read+0xb0/0xb0
[ 3014.449235]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3014.449779]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3014.450305]  do_syscall_64+0x33/0x40
[ 3014.450662]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3014.451172] RIP: 0033:0x7f2774755b19
[ 3014.451547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3014.453350] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3014.454121] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 3014.454829] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3014.455539] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3014.456238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3014.456941] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:50:54 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0xc3b4eeebe4863bbe)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:50:54 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000040)=0x7, 0x4)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:10 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x2}, 0x3ff)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:10 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x2c, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:51:10 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+,'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:51:10 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99)

13:51:10 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x21a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
bind(r3, &(0x7f0000000040)=@phonet={0x23, 0x5, 0x1f, 0x9}, 0x80)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:10 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5, 0x0, {0x0, r4}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000b, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:10 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:10 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+\"'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

[ 3030.948633] FAULT_INJECTION: forcing a failure.
[ 3030.948633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3030.949951] CPU: 1 PID: 45411 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 3030.950543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3030.951238] Call Trace:
[ 3030.951473]  dump_stack+0x107/0x167
[ 3030.951789]  should_fail.cold+0x5/0xa
[ 3030.952122]  _copy_from_user+0x2e/0x1b0
[ 3030.952472]  __copy_msghdr_from_user+0x91/0x4b0
[ 3030.952870]  ? __ia32_sys_shutdown+0x80/0x80
[ 3030.953253]  ? __lockdep_reset_lock+0x180/0x180
[ 3030.953662]  sendmsg_copy_msghdr+0xa1/0x160
[ 3030.958084]  ? do_recvmmsg+0x6d0/0x6d0
[ 3030.958457]  ? lock_chain_count+0x20/0x20
[ 3030.958836]  ? __is_insn_slot_addr+0x123/0x290
[ 3030.959220]  ? lock_downgrade+0x6d0/0x6d0
[ 3030.959571]  ? mark_lock+0xf5/0x2df0
[ 3030.959887]  ? mark_lock+0xf5/0x2df0
[ 3030.960208]  io_sendmsg+0x62c/0x830
[ 3030.960517]  ? io_setup_async_msg+0x2d0/0x2d0
[ 3030.960904]  ? mark_lock+0xf5/0x2df0
[ 3030.961225]  ? lock_chain_count+0x20/0x20
[ 3030.961586]  ? __lock_acquire+0xbb1/0x5b00
[ 3030.961970]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3030.962414]  ? __lock_acquire+0xbb1/0x5b00
[ 3030.962775]  io_issue_sqe+0x3b3/0x77b0
[ 3030.963110]  ? perf_trace_lock+0xac/0x490
[ 3030.963465]  ? io_connect+0x610/0x610
[ 3030.963788]  ? do_raw_spin_lock+0x121/0x260
[ 3030.964157]  ? lock_acquire+0x197/0x470
[ 3030.964492]  ? find_held_lock+0x2c/0x110
[ 3030.964843]  ? __fget_files+0x2cf/0x520
[ 3030.965179]  ? lock_downgrade+0x6d0/0x6d0
[ 3030.965534]  __io_queue_sqe+0x90/0x9d0
[ 3030.965875]  ? perf_trace_io_uring_register+0x500/0x500
[ 3030.966374]  ? io_issue_sqe+0x77b0/0x77b0
[ 3030.966762]  ? __fget_files+0x2f8/0x520
[ 3030.967158]  io_submit_sqes+0x44aa/0x8610
[ 3030.967577]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3030.968061]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3030.968538]  ? lock_downgrade+0x6d0/0x6d0
[ 3030.968912]  ? find_held_lock+0x2c/0x110
[ 3030.969314]  ? io_submit_sqes+0x8610/0x8610
[ 3030.969727]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3030.970179]  ? wait_for_completion_io+0x270/0x270
[ 3030.970631]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3030.971053]  ? vfs_write+0x354/0xb10
[ 3030.971392]  ? fput_many+0x2f/0x1a0
[ 3030.971722]  ? ksys_write+0x1a9/0x260
[ 3030.972070]  ? __ia32_sys_read+0xb0/0xb0
[ 3030.972441]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3030.972906]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3030.973378]  do_syscall_64+0x33/0x40
[ 3030.973714]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3030.974183] RIP: 0033:0x7f2774755b19
[ 3030.974518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3030.976128] RSP: 002b:00007f2771caa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3030.977785] RAX: ffffffffffffffda RBX: 00007f2774869020 RCX: 00007f2774755b19
[ 3030.978628] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3030.979330] RBP: 00007f2771caa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3030.980010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3030.980692] R13: 00007ffcf2907aef R14: 00007f2771caa300 R15: 0000000000022000
13:51:10 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x12, r4, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:10 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1b4b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:11 executing program 4:
r0 = syz_io_uring_setup(0x192f, &(0x7f0000000180)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100)

13:51:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={<r5=>r0, 0x8001, 0x0, 0x8})
io_uring_enter(r5, 0x6abe, 0xc1c5, 0x0, &(0x7f0000000080)={[0x6]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3031.127485] FAULT_INJECTION: forcing a failure.
[ 3031.127485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3031.128765] CPU: 1 PID: 45430 Comm: syz-executor.5 Not tainted 5.10.226 #1
[ 3031.129392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3031.134157] Call Trace:
[ 3031.134412]  dump_stack+0x107/0x167
[ 3031.134752]  should_fail.cold+0x5/0xa
[ 3031.135121]  _copy_from_user+0x2e/0x1b0
[ 3031.135505]  __copy_msghdr_from_user+0x91/0x4b0
[ 3031.135932]  ? __ia32_sys_shutdown+0x80/0x80
[ 3031.136348]  ? __lockdep_reset_lock+0x180/0x180
[ 3031.136777]  ? unwind_next_frame+0x13ef/0x1a90
[ 3031.137207]  sendmsg_copy_msghdr+0xa1/0x160
[ 3031.137614]  ? do_recvmmsg+0x6d0/0x6d0
[ 3031.138006]  ? __is_insn_slot_addr+0x123/0x290
[ 3031.138432]  ? mark_lock+0xf5/0x2df0
[ 3031.138771]  ? mark_lock+0xf5/0x2df0
[ 3031.139124]  io_sendmsg+0x62c/0x830
[ 3031.139468]  ? io_setup_async_msg+0x2d0/0x2d0
[ 3031.139882]  ? __is_insn_slot_addr+0x14c/0x290
[ 3031.140298]  ? lock_chain_count+0x20/0x20
[ 3031.140673]  ? mark_lock+0xf5/0x2df0
[ 3031.141002]  ? register_lock_class+0xbb/0x17b0
[ 3031.141420]  ? arch_stack_walk+0x99/0xf0
[ 3031.141809]  ? lock_chain_count+0x20/0x20
[ 3031.142205]  ? __lock_acquire+0xbb1/0x5b00
[ 3031.142619]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3031.143112]  ? __lock_acquire+0xbb1/0x5b00
[ 3031.143516]  io_issue_sqe+0x3b3/0x77b0
[ 3031.143894]  ? perf_trace_lock+0xac/0x490
[ 3031.144296]  ? io_connect+0x610/0x610
[ 3031.144659]  ? do_raw_spin_lock+0x121/0x260
[ 3031.145073]  ? lock_acquire+0x197/0x470
[ 3031.145451]  ? find_held_lock+0x2c/0x110
[ 3031.145859]  ? __fget_files+0x2cf/0x520
[ 3031.146242]  ? lock_downgrade+0x6d0/0x6d0
[ 3031.146633]  __io_queue_sqe+0x90/0x9d0
[ 3031.146995]  ? perf_trace_io_uring_register+0x500/0x500
[ 3031.147485]  ? io_issue_sqe+0x77b0/0x77b0
[ 3031.147865]  ? __fget_files+0x2f8/0x520
[ 3031.148247]  io_submit_sqes+0x44aa/0x8610
[ 3031.148655]  ? __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3031.149114]  __do_sys_io_uring_enter+0x6b5/0x18c0
[ 3031.149556]  ? lock_downgrade+0x6d0/0x6d0
[ 3031.149952]  ? find_held_lock+0x2c/0x110
[ 3031.150334]  ? io_submit_sqes+0x8610/0x8610
[ 3031.150748]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 3031.151196]  ? wait_for_completion_io+0x270/0x270
[ 3031.151643]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3031.152071]  ? vfs_write+0x354/0xb10
[ 3031.152417]  ? fput_many+0x2f/0x1a0
[ 3031.152761]  ? ksys_write+0x1a9/0x260
[ 3031.153115]  ? __ia32_sys_read+0xb0/0xb0
[ 3031.153494]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3031.153994]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3031.154470]  do_syscall_64+0x33/0x40
[ 3031.154819]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 3031.155291] RIP: 0033:0x7f2774755b19
[ 3031.155637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3031.157280] RSP: 002b:00007f2771ccb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 3031.157990] RAX: ffffffffffffffda RBX: 00007f2774868f60 RCX: 00007f2774755b19
[ 3031.158632] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 3031.159260] RBP: 00007f2771ccb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3031.159895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 3031.160542] R13: 00007ffcf2907aef R14: 00007f2771ccb300 R15: 0000000000022000
13:51:11 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_setup(0x293e, &(0x7f0000000040)={0x0, 0x718c, 0x4, 0x3, 0x24e, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd=r3, 0x2, 0x10001, 0x7fff, 0x8, 0x1}, 0xfffffc48)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+/'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:51:28 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '\"&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:51:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r12=>0x0, &(0x7f0000000100)=<r13=>0x0)
r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r14}}, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x100}, 0x1, {0x0, r14}}, 0x3)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x1)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x63ff}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r0, 0x8000000)
syz_io_uring_setup(0x3385, &(0x7f0000000080)={0x0, 0x5618, 0x1, 0x0, 0x78, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd_index=0x1, 0x8, 0x0, 0x0, 0x13, 0x0, {0x0, r9}}, 0x37e)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0)
close(r10)
r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+,'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:51:28 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r3, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r2, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb98060603549ab5f32e043f0000000000006ce9d5b9cb35f91d223dc9cac7a29160ef81730a58e8a5df847eebfc506824dc392c7412666c84e53bd782ead9c49a6e3e166604d2dd6c35a738449b2baba11e78d9abcef639284e436a3fb65fb4f80920cbed6ae51a0229897288645b603338398902f72c860e08"], 0x98, 0x2)
syz_io_uring_submit(r6, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r7, &(0x7f00000007c0)=""/180, 0xb4)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r8, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0)
io_uring_enter(r9, 0x100058a9, 0x0, 0x2, 0x0, 0x11)

13:51:28 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r6, &(0x7f00000007c0)=""/180, 0xb4)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x66, 0x6, 0x40, 0x0, 0x3, 0x4000, 0x3af11d9644a0711, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x2, @perf_config_ext={0x1, 0x9}, 0x4, 0x5, 0x1, 0x2, 0xae4, 0xa52, 0x8, 0x0, 0xfff, 0x0, 0x6}, r5, 0x6, r6, 0x9)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, r4, 0x8000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in=@remote}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2000, @fd=r5, 0x101, 0x0, 0x0, 0x12, 0x1}, 0x6)
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x30, r3, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x3)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
io_uring_enter(r0, 0x370e, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x12, 0x80000001, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x45)

13:51:28 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x7e73, &(0x7f0000000040)={0x0, 0xbcfe, 0x8, 0x0, 0x177}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = fork()
ptrace(0x10, r5)
ptrace$setsig(0x15, r5, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1d0, 0x19, 0x400, 0x70bd26, 0x25dfdbff, {0xc}, [@nested={0x3d, 0x72, 0x0, 0x1, [@generic="8d9f39d14073f53f096a19f4cc832218d6fb128973782e0e66a377848905d7f8f85cc8c03b7aad6d8a", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x7a, 0x0, 0x0, @pid=r5}]}, @nested={0x43, 0x56, 0x0, 0x1, [@typed={0x4, 0x6d}, @generic="6b33841a34e8917015f8eaf1e25a33e9e44e4c8b58303968714d65701a04e1b7bb7708d58221c8fa2c64dc1374a2bb04ad7927563d7b0f30a61b1e"]}, @typed={0x8, 0x1e, 0x0, 0x0, @pid}, @nested={0x59, 0x37, 0x0, 0x1, [@typed={0xc, 0x25, 0x0, 0x0, @u64=0x5}, @generic="cbaf853518ab09a7b329022045930d1beba0796df01840a8a537b277cb8f3e9bb7c3033ba848a6cd9f49b42bd6ff945546c4873522efb8a18e2ef2385afc8d6c0b75fe66d09829234f"]}, @nested={0xd2, 0x5b, 0x0, 0x1, [@typed={0xc, 0x67, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@empty}, @generic="5f933b88acfa04ace6809837268372aabff769e0d17ff13179", @generic="dc8bda4c3b503849bfc3c39d4559a3725c60266593f79a89c5eaa1c0080f4040edfc79e7da97ea87b8491b99a2b41771825581d52448be236c86ebf3126a6cedf91d6003cbc080fedfe4708bd664a67fe4fea33909e87e51980e0905c9d2d979c419e26b2c0e42aaf3647566e29944ca17c6c216a39977c21cbe81618290c6b60b356c9d5c394c5e8a63ea8238cf706a1410d46c05b764bf48", @typed={0x8, 0x28, 0x0, 0x0, @u32=0xffff}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000805}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

13:51:28 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3, 0x200)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x80, 0xff, 0x0, 0x9, 0x80000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000040)}, 0x2, 0x6f5, 0xf0f, 0x9, 0x11ce, 0x3, 0x800, 0x0, 0x3, 0x0, 0x100}, 0x0, 0xf, r4, 0x18)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x40012001, 0x0, {0x2, r10}}, 0x1)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r11, &(0x7f00000007c0)=""/180, 0xb4)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0xfd, 0x1, 0x6, 0x3, 0x0, 0x5, 0x4044, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x27c6, 0x3, 0x8, 0x6, 0x4, 0x7ff, 0x20, 0x0, 0x78, 0x0, 0x1000}, 0xffffffffffffffff, 0xf, r11, 0x2)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:28 executing program 1:
r0 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
inotify_rm_watch(r4, r0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r2, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0)
close(r5)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r7, 0x8000000)
syz_io_uring_submit(r10, 0x0, &(0x7f00000005c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r7, 0x101, 0x0, 0x1, 0x5}, 0x7f)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r9, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xb9, 0x1, &(0x7f0000000380)=[{&(0x7f0000000340)="1560f201a35219fc60e9869e28f476f859015e5840458f7cdf0dad8acb083c1c14152470393d6ab4", 0x28, 0x4}], 0x400, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc0a}}, {@nobh}, {@noblock_validity}], [{@measure}, {@dont_measure}, {@obj_role}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r11}}, {@subj_user={'subj_user', 0x3d, '\xd0'}}]})

[ 3048.429595] cgroup: fork rejected by pids controller in /syz3
13:51:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000940)={0x0, 0x0, "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", "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"})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
recvmmsg(r6, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680})
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:44 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, ',&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:51:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x60ff, 0x0, 0x0, 0x0)

13:51:44 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x26be, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r5, &(0x7f00000007c0)=""/180, 0xb4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/115, 0x73)

13:51:44 executing program 4:
r0 = syz_io_uring_setup(0x1960, &(0x7f0000000180), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:44 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x2010, r1, 0x8000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
syz_io_uring_submit(r5, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x912, 0x0, 0x0, {0x0, r6, r1}}, 0x7)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000400)=""/73, 0x49}], 0x5, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x61)

13:51:44 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}, 0x22}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:51:44 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+/'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:51:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
openat(r5, &(0x7f0000000040)='./file0\x00', 0x240000, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:44 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x3c04, 0x1d64, 0x1, &(0x7f0000000040)={[0x1f]}, 0x8)

13:51:44 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7ff, 0x80000)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x7, 0x1, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x67, 0x0, 0x9, 0x29, 0x0, @local, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xf5, [@rand_addr=0x64010100, @empty]}, @ssrr={0x89, 0x1b, 0xf5, [@broadcast, @multicast1, @loopback, @multicast2, @remote, @local]}]}}}}})
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:44 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:44 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:51:44 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

13:51:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xc7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x100010, r3, 0x8000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
io_uring_enter(r0, 0x6179, 0x88aa, 0x2, &(0x7f0000000040)={[0x3f]}, 0x8)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x3, 0x1, 0xb7, 0x7, 0x0, 0x1, 0x40500, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000003c0), 0x9}, 0x10, 0x0, 0x3, 0x2, 0x2, 0x0, 0x73, 0x0, 0xfffffffc, 0x0, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xa4, 0x6, 0x0, 0x0, 0x0, 0x7, 0x40428, 0x9a5e09f257e4bac1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x4, 0xfffffe00, 0x3, 0x2, 0xbd7, 0x5, 0x0, 0x3, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r0, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r1, &(0x7f00000007c0)=""/180, 0xb4)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0xa6, 0x81, 0x2, 0x0, 0x100, 0x60000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44b, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x5a250, 0x8001, 0x4, 0x7, 0x8, 0x4, 0x2, 0x0, 0x20, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000300)=""/115, &(0x7f0000000380)=0x73)

13:52:00 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}, 0x22}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:52:00 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise, 0x22}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:00 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xb0ff20, 0x0, 0x0, 0x0)

13:52:00 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2026}}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
openat(r5, &(0x7f0000000080)='./file0\x00', 0x10400, 0x20)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x6, 0x0, @fd_index=0x7, 0x7f, {}, 0x6, 0xe, 0x1, {0x0, r6, r7}}, 0xffffffff)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000a, 0x20010, r3, 0x8000000)

13:52:00 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = syz_io_uring_setup(0x1e9a, &(0x7f0000002e00)={0x0, 0x80d1, 0x10, 0x1, 0x325, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002e80), &(0x7f0000002ec0))
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002f00), 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000002f40)=<r7=>0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = inotify_init()
io_uring_setup(0x61bd, &(0x7f0000000040)={0x0, 0x8944, 0x20, 0x2, 0x3bf, 0x0, r0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000140)={"53abc6abf1d9a2d838f911228cb32614", 0x0, <r10=>0x0, {0x2, 0x400}, {0xffffffff, 0x8}, 0xb3, [0x4, 0x9, 0x1, 0x8000, 0xf3a, 0x0, 0x0, 0x7fffffff, 0x3, 0x68, 0xf42, 0x8, 0x100, 0x1a1d0a1d, 0x101, 0x7]})
r11 = syz_open_dev$sg(0x0, 0x0, 0x2001)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, <r12=>0x0}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r11, 0xc400941d, &(0x7f00000008c0)={r12, 0x5, 0x80000001})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000580)={{r9}, r10, 0x16, @unused=[0x8000, 0x1, 0x6, 0x8e], @devid=r12})
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000003000)={{r6}, r7, 0xa, @inherit={0x50, &(0x7f0000002f80)={0x1, 0x1, 0x1000, 0x8c, {0x0, 0x3, 0x3, 0x1, 0x6}, [0xae13]}}, @devid=r12})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/\"+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:00 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r0, &(0x7f00000007c0)=""/180, 0xb4)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000600)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fsmount(r7, 0x1, 0x8)
syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd_index=0x5, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f0000000500)=""/195, 0xc3}], 0x6, 0x18, 0x2b6edb2159b64b51}, 0x4)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000640))

13:52:00 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620a, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
lseek(r3, 0x6, 0x1)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r5, &(0x7f00000007c0)=""/180, 0xb4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x8000000)

13:52:00 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xf0ff1f, 0x0, 0x0, 0x0)

13:52:00 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd=r1, 0x7b8, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000000680)=""/190, 0xbe}], 0x5, 0x8, 0x1}, 0x0)
close(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r3, {0x6}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8a0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@fscache}, {@cache_loose}, {@nodevmap}, {@uname={'uname', 0x3d, '/dev/full\x00'}}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, '\x00'}}], [{@pcr={'pcr', 0x3d, 0x27}}, {@subj_type={'subj_type', 0x3d, '/dev/full\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}})
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x44280, 0x7f)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0), 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x238}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@remote}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @local, @private, @broadcast, @remote]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x9, "589a77a68f6d72"}, {0x5, 0xe, "f6cb2514b3697262f8251e7f"}, {0x1, 0x2}]}, @noop, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x4, "6b05"}, {0x1, 0x9, "b5f12bcb89500f"}, {0x5, 0x8, "18bd19a693e4"}]}, @lsrr={0x83, 0x23, 0x0, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xc1, [@local, @remote, @local, @multicast1]}, @lsrr={0x83, 0x7, 0x76, [@multicast1]}]}}}], 0x120}, 0x8000)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0), 0x0, &(0x7f0000001a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x238}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@remote}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @local, @private, @broadcast, @remote]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x9, "589a77a68f6d72"}, {0x5, 0xe, "f6cb2514b3697262f8251e7f"}, {0x1, 0x2}]}, @noop, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x4, "6b05"}, {0x1, 0x9, "b5f12bcb89500f"}, {0x5, 0x8, "18bd19a693e4"}]}, @lsrr={0x83, 0x23, 0x0, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xc1, [@local, @remote, @local, @multicast1]}, @lsrr={0x83, 0x7, 0x76, [@multicast1]}]}}}], 0x120}, 0x8000)
sendmmsg$inet6(r3, &(0x7f0000005140)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x3f, @loopback, 0xf05}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000200)="93bb5fdf0ae57c0c4e1c7d335c067822be7fb3b737d6b74afb7e1abe0b930f64e8404bc7171212fd6d67d1e8d9ae82c1aa1f924ef40fdb5e024a9a435a707332f26116ab3207cc6894ff8203d1151078ba0c78b029f11bf6fa292c9ee523a9d4dab3e0bb3dabc3122597e6b0e884c8b6925bb29c7126ab14be81a1815a9ffd076ce7b41fa03cb22e29c1cb93f66a67a36aa5fb3a52507ee3ca2146d42b5e6843584df1b361363c08f9809279ad4772b3672c1164f61e3ee941140df0c708619f", 0xc0}, {&(0x7f0000000080)="ea487bdb5a63e8f51d6361eafd663041520afd4e3178fa6803d6ed055575d83a1694f58e26651ce952ef45b09d9d0af9fb3857366e77d5c3bac49b43b5b3f30d5fdcbee7092dd21f2a577a5dbfea1c3e479de12a76396f893766ed7aae246f", 0x5f}, {&(0x7f0000000300)="5c2c1756d0aeb6a597aef5e5c0b92c36d0c17d303ce5f09fe7f8f2810b978805ce62f6a4e948d0d9e41fd3e7653739fb891f7b472823d3ed77ceb091b805361480c6254e48ea92765b38c7a56ce21739c9bf7593032387087a0bea97", 0x5c}, {&(0x7f0000000380)="80e8c48a399b3e94ccad52e75b180a7f1f55f11b14db1a86d5207855fa9fa24d37ed56cf136a9fa611b322d5f3ce2d04c971b47f76951291d96a92706ad07254d3b85ce4ed2c47c4a55fecd204608e6d2ddfe8d46f1d84395317ff80e603ccffc6441de4a4e51abd54050eff0311e6b87a21c06e196846f606de47d8d28f6d84b7e18ed13f33894a475030071fa9b2d9c53867a79928dbd5891b8f0beb8bf5571b4f2d9586b29ed8bf9a4e1ba4ce6fe4eaf1247630642132f1e886e77ed3e369a6355c1a10e15f89883ee4b0b9b24572293d242d266b2ada45baa5b28f4745411f78956d97c45b7fda669a8d3045703d0ccccbc1a46907f62686c02008", 0xfd}, {&(0x7f0000000480)="2a4bc62cdc64ebfc358b3cb5092af3200d5c47c6d5d4df980440df454871c33d86ebbd861a96deec9be69933617250cc3f53e351f8400984c9ba88fc89d3896ab08c84d9175d45fa16a22125cc1c6de47a7ecc1b668eada263a26759bab97f2eaae00d12953bb07ba3bbba6a26e23e1f504428e705eab9461cbd48664cf5c547efb729b9eeabe1f33d7892af04e3f463a3f5cbd0e64c245053a8f048e17f93fb55a192cb8f8e453e367419f63c2cddff556981a68feeb575c5c5f0c4f4dfe404d978188a9319b71178a18623f278ce1bc0dca3d3efd49b2425cbf498a4c6112131114751ff46968255a37a90cfcd8ee32249eecedd21fcc26c", 0xf9}, {&(0x7f0000000580)="fc0a5bcd9939e321925220ac8dd57ca5e1c11c6bc9ecc9f669c1558be42d7dbec1a1b2f8ef6f53ecaf1da4b87d2314c7aa80abbfc6a56705ae3e6acc646a972beb67a9654c06783299e3d37fe002822d696bebc333700217dc3ae44e75218cb9caf81aedcc3e0906b6a4237a4fb689c372c4389e839cfc21eeb0c1859b1c10b40ac830750ca7133c52a491cafa3e933c357af98eb9a437a04f013dbb5ed0e9fc7f7737c71c00dab8fc2d10c9b0407bf4a970ecc1da3e7502e813c8985635", 0xbe}, {&(0x7f0000000640)="092ba344724d258baaab0a7ad3c4f4d5da985f269ae631f3da0fbdefbf7a58b25ffc86fd4fade207781ee37555d3134156a0d65998b8e07adb1b1f9de5af651bc425a93250de74817cf9bc5cbb70b98d6cee46bfbeb01486b385119513bdfa78c42bc3a02606dad7c94bddcac8de36700613dc36139d7a57daf7e97323d6a30ef0c1cb385c12ffca0abd4432fef7c7715ba4b63118c71d9ba0d9fa06a0238a1d9e65150efa9cdf7cc83719dab1d796e3bd19284a1305deda953c28bb2ffbd2343601be8a412216b8cd9d5d6b354f72275a9470c9f0f80c7c5b295a85823b1c0fbfe5aa1a3d7d4efd94fb535d80f5b619ec5cb146e91b4047aa", 0xf9}], 0x7, &(0x7f00000007c0)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2c, 0x4, '\x00', [@pad1, @generic={0x80, 0x1b, "e237287ce86c5a530f44f0c8c7c33911e99a2188175054d5ddd5ce"}]}}}, @flowinfo={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x15}]}}}], 0x78}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000880)="fdb31b37af7247dfec9f44faf6ae73ed70a8be6182fd812844ee7d659cc0ed5c4d8dedb3a6719cd3e414262bf020c7cc2a9947bdf4d1cc293def153a5970bb4d67cf8246044c3a092f01d8f006a0d1531b47586f983796b608989d00b5fb7e4eb94ccff7a652e0f6c863f247d155229901c702603bd9d0bfe176422392f050db095d07afa488fb82191a1c545a89e1e37174ea3abfae34da28f04fefd2e56a251f2af5db0bf9e5c722339d0a3ebcff1e2b8864c5a9e412ad3523fca8acf8a10feb065aff6e", 0xc5}], 0x1, &(0x7f00000009c0)=[@rthdr={{0x38, 0x29, 0x39, {0xe2, 0x4, 0x0, 0xd6, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x38}}, {{&(0x7f0000000a00)={0xa, 0x4e22, 0x8, @mcast1, 0x1}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000a40)="1e3dfcb5bd2d73ea0f6fcedd3b4d27016fcd5763c67bd1a2d99d5882dda75edf77dc0dfa323c52cf6b97460634f39bac6c198329e609014a60c013", 0x3b}, {&(0x7f0000000a80)="29c00df5cde37a8c7cbec977fda95508b2c8cfecae1ee4258fe09f4b72ec1c3518578ff368c1dc2373059714ab2e2476f211dc1267cc00bfcad1967d86f1f93e5fbe33c94ae2aa8192cc42ed109013b7fbd122c0fbbe234b801d7dc85c243cf52eca682193e04f26c81042fba3526456b4c30b595c8a60d7d7ed04788376261c09250821fb956d41760f2d718d4318aa9cee38d26deead13d598d95223b4cabc", 0xa0}, {&(0x7f0000000b40)="90b361924b3d0870c316371584f92ce5eba3ac8126a3990c1d39857647b4e8c60ad70930cb572af060bae8e8b77ce511ec8a33372bacaf91d30f4aa55be0562d393fe3c9653063772b93d06f41efce9e912da1b10d27e4c8301159b92a62fee45ed80476666e9abcd189d2bf44e456ffd3f380ffb23cef06a9639cee50fe613bbd5d56dc45a88c62c88f616a81d1d845ec41f5af90c9e4a26af8c054506612d8a83d0013beb39b9ec0bb76063398cf7a80311964f086de074b1c126904bd9ca276db431693e4b7", 0xc7}, {&(0x7f0000000c40)="f4c23caa2a48b6dbdfaf46cd1bf038c40744ab280ae5a55b238dc112b0bec35af9b849aef975e42a599c1ce6fe0ab08aa7606d0426d01b44e1d8e7d384ccb47b1404ba8f7d33ecafdd566e5737ed37e549d520c3b52b03162b1147d088acb9525d811ef4ac89d5f5dd63303ae30d193ae737d95a5300a219a852b618a321ffb4b0a12678a19622b3f1eb23ac55e30d58c7be5e8d4b05f701b42968e21ca16439ffba92ab7b0d25ca6a4bb6bcaccd8e69ec79c8800294fc88b1ae739c4b5ed4869fe916526e2e922024d1ade7812aba4b", 0xd0}, {&(0x7f0000000d40)="6049b452e77331025f357be8702cb3f0fcd32c5cd2240a1408145bb2a8b61630f4a5c54764aba6e1af4f5604f5721a1bcc8c895094bf69a5738302261fed29da943a1eb178b802234c64309b66e97d36bd041d4d715be35792a92e44b553371807e1c3c0c6d5db2fe929ec1b419e5e5c3e27e6ccd9672d5905504d28d9b8093384f79ec6ccfe041f7e993391894a9f8ae3cf0f878e7603e834d4002f30787a8a44fdcd856a621fda3f68549b5d5291d3c792256d90c6bb284ef2f545b47e6d39ee3f324983463c292b", 0xc9}], 0x5, &(0x7f0000000ec0)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x2c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x0, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0x923b}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x542a5e1e}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc0}, @enc_lim={0x4, 0x1, 0x4b}]}}}], 0x78}}, {{&(0x7f0000000f40)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000000f80)="8567fafb86f479b9c8635ee2d0b5f8baa1e4c2197c084ae6a771041132d54c92888a6efbb3d9275fa62748cc08eece285cbb39e44996ad5a4d851a96f23169e9bbbb86cfe78262f4d92ac5610ef074082eaaa21cf8e09ec20ff0fa1110b9831e1d9bf5b45dccae79a57c45d13b6fd1f799cef5c894c9746aab1b371699f2985a28e9c12883bae1f8df077f06d94a18df43bdbf96fa98ae694f69ae8ead1aa77159b938fcb6212ce127dab494601954fe431a8e0f6db6764dd5b5c9ac55ada88c396bce3b1b04477bc2922a7086efc6476fae2afd48ae3308c68276f5fe432ed31fc152736c", 0xe5}, {&(0x7f0000001080)="5e610d3556f46c058649183c449df7dc971d006475888c9f8cfcbc0392fd06fc6fabff47257c544fd1fe2f7afd1af0016a76d6fa2d2e8a7f598bfa1487ab9b6b0b791eec925d9097009153cf44672b0ed2d829a70283d73f5510ab36b876f27f7f589a23aa4ee312a0d2eb7b75acc9c7a0800c74b165f56a7b48c66fa98231338278956e9512e0a30b467689ee7b7d2631a89f91366b0b38e01605b2ccb116e6c68e72cabfc8374dae6001c90a467aa7cdba37692fc566597da219febee06488d17cc2b3defa43802963ecbcf455e8f8e02bf9332d93abdd48e3a571de7c3e04c4d89efe8056ddd904b3f61338e98ab2dee26c6ad9db8a239a0182f2906e1bc4cf82abc4e8f388e2518cfa40b29e4c26a19b8a39526feeb173d201a2af7b479b5f73eb0253af63764fd36b377418e135f7a64ee0f43104cca174f4dd0ced3920c146d1f8294d9da9aa545567942e181155947b304b3e1b1b51af89ebce1f4a1fa7543110cf67111969ac269b16e97b53c70ad14ae8903369799acd726fee66912afe62dc2aaa1f964f3d624277f369d9a48789c844e1a5682d79412a6316db244e7a75a780059367f31afb4f49790c646ce02565fc29b1f209352fe84b6d3b54d1931b455aa4ce94041fbe12de5ca27378cc8ed36c6218601c1e174a89a2cf8e7525fd34a2ff8b44ac3dab3a3b53e7e920fbef38f018b106c2c6db7acd19e269ba5ee846b5f1bacee15a977c8a3ed86a2d7d1059df8f65e29c8a89b162de7f7400562feb52a66d31cc02e26e5926c81c51291f41b0fb3b9ce21e0e873cbc94a4c72216d5cfbb79747acc723c8b3ff500a2373ccf3c5720bc6bfdc7c16a3789777362c9d224b843a16569ebcd88c5fbe13da7b8a6985b079e1626afb8981de6ebffc652f6c63de00567a915cb8d5ff0d00801f9900bb42978214a52eaee125f7452c3731b25d479a5f9814886928e24adfc7822772b5744e8779f50b3c53bf98cbc0603cfb4e03b51c4f5b0a5951534dbd4de07ccaa4f0e49ddca8e6795109025ec0e3a24e64c0524a792a806c506c9013614b733a0ad386c5bb2f077ec513aad7893c6af0028665f66c390e6c148c0b023f1c7170b1c4b3870fb58565deec7a9e7f030ef54220f8e4588467d074ad7609ffa895d7ffd84b6147174c0ea972b8cf5f0279f978dd5404fd8314771c66f7386348df0b05adf1375fdbe02aaa703c5824efb24c2c5397248653d7a5fb75d2b13fe9c1c411269b774660c9b48cf615b5428aa0b55fcd25672825d24d17a52dd914ea74628cb0981795c8721b8c780b117d9f922dda85ed4cd77b1e7190724b408cdf3bf5a41f0ca54836d17a5dcaecb022d88f1df3d71ae959d3a679d408ec1968e50ec60e849b5ec91671f93fba75ed936ba3176cae65e87400d065bfeea34ac75d77f068bb5339de9bc0b1ca02b177bacbb373833142b8656013af1f9b5a68e9ef8c2d8b21a6f9496abdc53fc9c92433f3721bbdab04f572f0d37b200623f7576c49d526d832bad5cd2d020d7d84c869d2f2b5d0b4231f4c0acaf14d1814b88e42818b8499497072b53ff60532f29d16e7a42e16b28c06e0d7949418312314293a7dbb327a7d5fdd217a059df2b5d8143eaeec2af4435b956d466c111ecb28573695a079198b474800a9ae1651e1affa8237602a13f834dec981361adc723e853a83679fd64c9d195391c1ea37e9817d29f17779ee255344050f5dca1bdeb73bad4204de6db88d44456d284832c8d88e884172940edb15f025cf57f83ccaf5fd2c6c6e6a04208a8d92afb19ba723cf71f91fc537f31afb4e66f4e9a404e278f9d23e78f7d1c8bcbd609c675ea8572ac926eaca31404df64443b41f288d771704a0ce270ca238d1ae696a24743254e4eb09aaaea57912abe566298d6e9d80f603dd0cfd895779de3e53798004e7ffade4e9329401ea8fa5a971114472103531b9886865e2da398bbc663d738082cfa227383fbfdc2b6ec5e43501fea3040cb580aa06aec476559a72e17bffdec9de1a2ad1301e8dcd1e88da6c87b6050d8a54e8d98d4d0e1b5b4810cef43bb64734971e4776bfbb370ad2f0f0f99d47bce9197b3eee12ae15657bc41db99c53dfd12131dc62a1c1f3d4d0a3269274dd760bedb2f2face233c2670de62415bcff35e38859f5a36e4574107f5ac044023e6f7b0aeadfec3d444a853221fd152b490c5055178f0224002bb129053da60704ab1b00fd7ece95eccaf171cc64cf3c99e6b1a82b7c82ac5728aacd27edf2a13177d1c4252fa136a08a2e147b617e39010054bb1c740903edc1fef3e41f2991b6f50e98d7116cdc5b8e3d9106746510e4b4479253ba41600f7dfbc7c9fd16d79a48a270e610d56881ed6449301470f6c37cc6688836fd752e78591954dd2b917e3826c5cbc5cc4a7c73d813e0a529ce8f7aa914c9cf7a3ff8a223c2fb5630c6cd96b5dd19bf2a93a2896d8047af687900d94fd481a2b1906e1710ad91a79caab2f082867d78cdbbb5d4b2ce14cc4a8c6bf16066ffa5314e22b71053a6fa85c383231e37308f6ea1d30e45a5b876dee781d6864daa02568b209a7fc58217dab7e934800b2938dde9ff8900f67fd8c22a339133048514a80f829e29f4cec1e353084946846ef16323ef5fd084f82306ad136e6ff156228320674f3f1584c9fcbf87298ff2df0404861f798cd4fdaa94131729a2a00683b480e13bf281cd4766ede75525919e352b0c849d97e25e6c4559fce996530b91fb2cf9acabbaacc9ea5acfd2dd0439570e93eccb5b3e50ecde7a1178167459f506ebf277ce7025f4ed4bd2e396429a502ea8e3915dea25d28e38f3c7b8286014bded498fe7b1d0679998b9cb315975eb8ef8f6c8bf3ec450a5894893922f997e60a98d9d625896902d9a651140eeffd3761304d6381d42e9b5ea36cd9402ae9c8b2112813e54b4514b5ab5136e3a3c8c2c38e17756c0a11cdd18b4fb489ed15455fd274d933260a625998bf16d633332f7dbd2eaab1018e37ee388ebd2a0791260a897ffde2a443c25451c8e795ad0435fc86bed81611399f545ccd87ea781e22805b1d1a29212a4b298bf322a9f1ed519a14ad2adbfe69c8300d499fd510e21e282342f6bbfcf510d77d1cdaebc83acc79bb728c0261c2a02ec5a238efa79425afc54ebbf405d797e946f1f11ed86c5d262792f08d4e48a05d1001975e9fcdcb03d25de5927e73ca9298195379f39357d3edaaed918c5415d5d158034b98f7361bd7150e1131bf0e223c16e595ef565c9dd1d65b143fec05fbc150f250abd7a126fb52898337373af8280ebaaadc2d92f2eaa7f0186041dcb4b3305e8efdced1c9b4ff125e7683dc790093782c6169e0f0ad1d91ba8ffaa33918aec586c0965811992e23d510a9ea60206a6230330e8b433b7dda597a12324a71ca3dc235c27ce8062eab20479ed51de7a4ce4a7df5fcb288eb1c8226ad4cee62af336afb4c6e59b3f74c67b81c9f08c491b1d6c427144d1e105b363e2d6fe21e540be04de06cd2eeaf73e44f019ea8a16ea156dff7dc97a75e0bfbdeaf28d96be11bf18713b46b39d6cb1d51b4a78ed2725ab131f28e835dbbdc1b8942c95a61317e94330356277eb866985e1b09b2c30f3856e119e074e89cc8e3200f96bf39cd8e3b253fb51bb54ebd5d637eb0b319fab51c05aec23f6011312be0501aba24a39140ac27fc778be9231d1ed9db68417655f5ddb6be613640e30e9380ec70f249b661b4477489ca83432b2382c4599a2cbda583f7f7986f0caff803bc088ddd09ba9d29fbb0ac6b4f63259e9ed7ddaba8add18af895fb0f8b8ab5320570605dac2eab5fb355cf37522e428c9906d59d797566ae2aba2b785eb84df5fffad78781bbb967fa21adbd1c030f8a0081b1ab05f9a8f473ece381b6c5951dee55eb6629492975027827a4c1873d2619d8b4dc8e8b1dded8adc91864a2b97729f4a4c862576ba3501aa1d64467d9009a1a36673c1d46ceff7d01aa0abad86b0e49df550beeefeb16c9b5b39490cecab7f8eda12adc66a78265ecaeb5dc0ba613dbd0b4b15954e9c0b2a49d45a3bfafaaf2b2c3882d84e4040bea22797aaf6124bfbcb054b1eefd13c28576345214bda1a31897e7dfa5b810d5465025977317297e95aa8c8d597d352ef2fae89fe72f3ea4309c87b496babceeab546b57c3677b438b1dfa27ab905cc25afa21da01491e7e80f3c5c8800540b3f2ecd91cae4d3fc22f845300460d063c43499c33c8f7d0602b41f9b1fec7e33d6d1b97657d21bc5af38bd8c83f7b616bf3122ce70d33f2fc4d802473c72f61b50112c143adea63083b541ff9865a4d3261c054dc6ac61632c9368a392b92b79d38c2317a95f6707c389a732c6b273bc26bb11def09d9f9a6eb3e0662ced7c7ae6103cf806f7df39154decd2c538a5bed9fb369d33dc04da2ae431f729b477854005069512cf2690553e4421c50883a2b7aa28901d8ca7ad772bbf8aba308ed88ab223f2772245450dce6161304e57d2c9a851d830af1c7ec98906fa882f84f649f043c14703749f8d8d42dd850ceb7347a847778669d42d394f163f005525ecdf89bdd207d82259f70caba378cd779ca8e762ff4403111896c5c3208944df49e9b5ff9943774f05e3d250c96dbea888fa8bc7ebd040bf999f6ac29ba4338016c6b7eacd22912b45359e9bedfc38a7520fc633113d036e148a5b4d986a7a11478aac078a2c26ac0fdca4af2439115c4655a44c530f4a68832273e942c20ef141f442276b30cf83fd51d14872fd7c15fff53328afcb68946a87dd359eb0b3c3824f5f466234a57c4f27b009a8b15eb621a2a44b84261b71caf7c9ff188eb50053bc5856d516cd7044a3c8eaae896b9c2934c3fb30de23a1d420207c28cca874b69db505119292ecd989159e9b49253aaf3f1d4a7ebb42b39fccc6101a2bc64caa156e3ff26e99b4cff93e9b352ed2924d4343cedf1de1f354e27589a5fffadbcb02aa40d930b79bfb733e8d99b75c96cf78973efd0c3762930eac4d9934198c923d4040442147f5f74a7f0d3c55aaffa5c568d48ae1b479135572fb24ee5044e681dc58fef61000910dd08c51f83addd57b246f4419a92caec4fb40ce10b84532170e1ba4252b0f18bbe0006c397824b0731710983f6fff48d6541884e4f49865102247638d7198181fc8ddce045486ea9f54ac0d0f9608a8e38f539c61ddd88aaec6bcf5e38e2335549efcc5cb0171260fce374673b568dff8832e179b05e6833a70bc0128bd5db6210df2416171664db2d45238ed966c16bebb0cc850c0aa7bb446b35d4ee2d208dd11e8d523ae6804543dff5c7e15462cfbb9c95665bcaa1dff673546016326012244d7baf457cda574538271894d3565847a3816c83c53dfbfbb59860180d7f0205189d3a6208cd33a85b8c7adf5752e4761be0e927a96df2f833adb63040d701f011573f166edeccee3db9c0108299656d0f01595d883c78b7bbdb3bb69af108014c4ad8db9413fbddff9ece5e5c4af827e7ba59fb98feb675de433296ab534e7714115bd8c47a72b43348566fc8622736c604748159c1196a6ded933bba6e44d92b48dadbe232d2efa19cb404c1146a83de0bed4bc436668363a6716f7b3b9b040f62c94b104dbb663208869bc27e49457aba2f525f4b6adf83787de69e593c7c863be2607e24d1f00cada79bfaccad1dd29768a2302255caa13152aef5ae9f5e56752c102e6dee1fb971469a23747219e6ca362680d6a5a796515037527bf7a2316823b", 0x1000}, {&(0x7f0000002080)="fd0a3a14c8b41fa3b7316cb499f2cba1427a77266062c46e6de396ece025c8da22fd6258bc5658efe5a9a6156dcd32ef960ebd0c549d039dd4e46aa8722ca7fb5fc979c9eb1efcbebcceaef9c71a4b7f80fe231b33dadc0f2e90bad0509f5f54543be8c6e7a27e0ba7e2962f650173c88483412a96668e93f2ffbd598126eb183506eaf8835f6a6ae08d61c446f3f13b3c4a9f", 0x93}, {&(0x7f0000002140)="64cd27a9a91a37f86cb67d79ce79d7153f8a0dc9c5db212d1614fdfec6aefa02d547ac7225aff77c0f930a5a05461ee711c8231b64c49bff919013dcf5ae699cf40169cea3f578fc4a11f494f187cb", 0x4f}, {&(0x7f00000021c0)="6d23fd0357a785204f9efcc0d1c659595414e0ce15c9b6bf3fadb252ac6f8ce57a87eb6642e57ea0d9b16788f69bbdfdb49f068f6302f71fdf41d7f63ca78fbf273739fba98b42c741584364bce3577a33bc", 0x52}], 0x5, &(0x7f00000022c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x800}}, @hopopts={{0xb0, 0x29, 0x36, {0x84, 0x12, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x58, {0x3, 0x14, 0x1, 0x8, [0x0, 0x1, 0x81, 0x0, 0x1000, 0x13, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x8000]}}, @ra={0x5, 0x2, 0x2}]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x4, 0x12, '\x00', [@generic={0xfb, 0x8d, "a53ae9343902c4cb5f5bd7a81283bf2dbf8b2da835fa7ae39d3f498c77b1bb62b2482efb087e7f4c8093635091b45c833c837026667cf9aaeeb000b7d5f3097f64b8763590bc910353addd45126d24329ea0a48ce048a3658fdade1690b3652854caf35701e6969184a58e89fbfd8f6a24c2d96cad07f32b7919a060c60379a5cd20a92f83bb81497dab2e8f35"}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x3f}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x89, 0xe, 0x2, 0x6, 0x0, [@remote, @mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @remote, @mcast2]}}}], 0x220}}, {{&(0x7f0000002500)={0xa, 0x4e20, 0x5eb, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80}, 0x1c, &(0x7f0000004740)=[{&(0x7f0000002540)="516a5f01cc2d7706749ee8321a380ffc28939b6198f108927f4484da3259c69a5c1a923913174771663b94b0abc3ac24e1b7986c2eacecbd9cef0574fa69", 0x3e}, {&(0x7f0000002580)="9f855f480a47e964c3701d71df2b16a7d31dbe095a49593e71beca70813a491f206851415760d6b0af52029d8abfbdbc5378ce5a276e11a2e112ffb4467a9652f57d3ca4ce5d7ed38e8dfd771ce8bc7a2294b5e9fea8a291e1a383b0bac2bf993e73604d7f8df96e7590ba38e47ad3fbdbf24866c4049794d21bb57032bcd879c3b3ed671b65550c5e3e3e05d571d7739bcec3953fae4103830ab6db03f9cf9ea3b8fa9d17b5ab4e3efdc76e869ed0afc6fee4bd75dfc4026f4d8c3fb8058e870767d37b01725b81b957f74f0cec730f621368263d191554bf8667c1f1c72647f287aeffa5ae5e1a1597721bdeb8e6de8fd98f1e78f95cc5984182263fb666cb43ea0857ad5227ac1a773823159f40ae915b844694ae9532378954f18541d80f8a6068e506a928dda6da930cc9b3be76caa08d9af56519447542dfa8d773f3f7be17442db6fe172425a03fbf3f7323cc4d7060dae318eaf5854aefb0bf4ae3c4f9a2e0357c62f834453e26bf332ae82516381e4efe8044cf627f101ef05ab063b86df69b14a14aaa02f64e5410d648b8c166197c42f97be6bfc46692cfc9c8d9593260473bcd383c011374da9edd667ca597e373b6b7157252b8a3958e2fcd536b48476168a36ffa393fa596b1aad1a6b771cd98ca7e6d96c89f4d274f894b9b43372bdf2e44f395c7d247084d2caefaea156ba6465880216fdddaf76c47255abfc53761e84784e4457142ce664c730b8fa1dc3511daf12ab6e37febd153f0aa0d9327b1bd9a22341a6aa48c01816a6baaecf959ee98286c61800cecd2630fd80904b4a4e267cb55d926eea254fc55ab902b46f019749b07299a9ba8c96ae0c251acb96b21cc7cae65a3bccfdcd6f2b7e2b7ac3a7fd6a069f310aea7fa7d49088e687975aed431f421651d9addae1703db86c81d0a26442cbc01aa94cfa6293e35fe0ae8dac0cd0a73bd3b837a8c43eb6d0f1b5eefde5f19df84c32f9c5d77a4f006e56301b0268b020cf08710612ba846b3af0b6600384115eeafd8528924945aa5d9e9fe1f8acbd506a4229927fce76906cd6a8e6f48769f7dad4b021cca52b2e4b2825cf1a7bf1f374b61963cf7ec59a382ac40ac49f331d1b1fbd3f5d47b72621cdea76c5bab81ad328bd8456253be76b964cbd3efe1ba822b965427c95df358eb9f084cb23d04d49ceaa5b9419fb299232d9e3f2c63965b4d2e58bac798959883f3424121b57e61bdb0480a18711dd6f34d19b7ffb438ba944110b4e57c184a9db2e4a8b34644871d785ab9f314a91b026edbc818a636000df40ed1a5d51b20b47e1b224a6acdfbc0ea08f27277ae96d9ee01c4b65254626dfbcd5e513c8d4d4598c0e812a5570544f75985838ddc0e55e3e3467f890a122be1e2c0c5e4153c4fc3adb1aa3a376443c0ae9b42e6fa73221be3790549903b9874ec62005619c94e0838c6ab498914584b2868996fea9657693a7263f977c2ccda91638f6334a105eb4fb0a68233d76762a5a59b8bec40fbe75c1403234acfd5821424e0a68ae956e7a9bf68b6b3028b79c20222b4725eff32f8896e211adfcb0832cb140064e9fa0b74222371d4d92ab37accc5573972ce94ce346cd798fd4d8e0339b526054588b0e83bec1a1fdc4695c37a20906912a48b4a0c1415c75074f0db6a92fd185ebfe5d5a61ef1cd25a362f1637c36016210cdf3b629730468a38a54e8b5c4236702fbbb7e721bf510314ad1bf1533f43a88c46e615106b606ad3e74a38d12f6568404b7143aa1ee27ad0990f9c4a16add5959eaf2dd663ce2f81366d8d978e5055cfcdcb0847807ccbf13002f4e6d6534283ee697e08bcd4d43f5a99f0d8976cff9581a61fd66066849dc3bbd0cd517e4ad6beb87f1bc71e2afbaebc93af631c629f906e6e0d82aeef26fa9110b49ad5853e457f1360834614d8d958c55d59825e15c249f488d58664061442ab86da4e7963bb8bd16544386d4fea84e4738ba5650750129dfee85cb8925d3668c739dbfaa5484d71da79c4b739abd8dd814e955b1add7fd4a19e9633b1aa91d0a44963b8b5e24020ab54d1a53fc1db9fb12ce8455530f146ca7d5c218ec946d5ad29b16b51bb3ba32aad58a5242feb73c2e7e91ec6c6c22a8958dd37f08f768b7372df9c45fccd0bb70a2fb1cbbda36cfdfc11e5c757c345caa61fdcd0006d94f880ebef45dc19203d9db74c78d71516cdcbbaacce926f93d389012449d7a2d2de997cbb2dc9e99ea077931492c9d01a1221166a75a1d96c22920b4a25d552db0356a53e10c730c307014c362ded1a9672513fb608bab023ac01d8dad76f62efc3f6bf08f1bce8899c04f2540d2c5d48ded0ea9d2e5eb5e3f492cabe879a344da3479b53dad8a044d29bd5a4d9d4ab40d165cf3a65314ed8ed1aa27c4359de0414a72e888aa36451f65f8b56c6ee5bd1e6e2e9046ff804774df8e77cdcec8e31135859d1824877cec04a522501c2549945f1824c79d579fd552871c2016bd1f47a640231c377981376fe601c35a738a65d095edde9a06ebc28896455e0e1f576cd041d2ec502ca5a86113058722e9bb9e72f010bab0db34aef9e90cbe984d87856016436f3b4a78fff33f3e50b841083f233f1bcf6af1d83bd82e263bda2561a30cff6bc0914dfafcfe0b19c809362ea5953bc650bebdf884373cd4d6630d2017cc593c3a47238b8d080d6082561504b7720f6548a97ccbee9f2899027c8fd1a9a5d1bb15be6ddc1bb02cdb65d343de3a0bfaa3af43936bdd7818afc9f7ae55feba6eb0d8fd454af6c332f7b55ac2f3b6da705444ac497fd377cc3917b0999d2bc255c5cbffbc979cb7656275761c101bcb8bd513194d676a71d02e482483b1bc321ec2784c747447719dfab7dea4953330fbf2d0f434c49b21d3221b6c777dcffb0b204b039c10a00fa3ea427bc71b6a3b549725fc64984d7d232cf21b90438e3989a52c6d6b0ede84843c4fbd5089b504f202b0dc5df30d8dc6be464821f83f6c1d047a9c3aad49ded44be11510f440652b5ce03cc6aaa55efcd91acee285b6b4542f231151c1d15fac046148b57afcd3772625604160c31e1a51fefc8343ee4f3dc241e74367d268d172c59f7e30f3bb0c791632552f063c65ce39bb01f413a55fdcb02250c4dcf23b7b8e9ba1167a11b6cf3b83007f0a1350e06dac88bf3321caff6f1235e33f229d0c0bdc84268a3a6c28aab75dfce1c8634ddc19baf7459580c8839d1e9b9128cb1ecc92d890c81925c5168c3a0245f199623055bee6e0a619839c063a532993d73f91012a95ebfd8c5220cc4a11f02f8770b80b5ed850efd86dbbad78519df2a07448176425a2a65e5142830d406066a0a4520cdc9830f6270f39295e9562f48f8a18b9d286c8d45afb9f8187fd35e0243259016d7cc4823717ac0ce26e0bb86483fb038981f8a6c50ee0fe45ffbbba6c6b9daed03bda1216e66270d84154035c6b0a3f04c3672e6a0c2c33c07e3f018e0c4ceb01213df327cd0b642d512e12552dd86fe9a7894e6baf9a6e1ad4fb18c612df9bbbb9e2d44ef0175f0f8e881874d23683b04031428713a8ecde248267bc9f899aae2ecc5cf681e7179479ad0da4c82120f7f5023f392f0c1609fc13a9d895167be8d64b37c9fec25bd730c578e94ebcf24874c050fa5e30e6850ecbf5cceef02a9f555841c25851dd64e7c85691fce6d51b7aa3dbc5eb870915e3c26d21e899ccc82157c068d69db6f854b2fe605883f7a110c82ce9f7046eedf9b63517aaf69037a182d4f5a6ff3c91280cd8ca66ae211cd7b819195d1411a52fec2fe4569e8b4617bb824cf17b4b0d24833ff7bb29ed38863fcd15c6c3bf63e6ce1ac1a3b42b38432f8432e5a867e0095c144c70225cdf428668500709d10ed2b02aeb6ffcbbf4a05bdd7e8fc1eb2feb34a81d285b9415b78c59fb735058c0d3aca36972cfbac79e8f6f04c8faec53b08c54d9823f07cba2ead8d50db43c479ab512dcdd8423140a9a621be9525cdbe5ef4f256630b79163e801060582c3dae243155857fb45b17b968a50697165c9c5306802d7cb75512a90c46a6d0fafd945b02ca46e16a1cc601024a44889a5a4a60b8e8cee7b725d903a7d857e63d7b93e464b6090ad41dd81b6e2b085fe3fc1178d8d75a8ac2126229f0e271573494d8257944983710cfa6cc69086d50b8c6242218ca32d6d03b1e8bd19d38e75888b6d8b24e44ac70685687d66dc4ff02155c6db5da5da5d86b201188a80d166306416ea8146a67190d9a4c4bd7ffd14ec3f1a8b15ade673853ced4720ec5e8e07ebeba6a014bad62ccff0caa3405de4299914d6090f73b2d37d2ecdfa7c31fcba6b93b21a60256d4028089611a5e071e18e75ac0b40b44c6dca9e590612b6576c31d7feb6620402eb70743836f11d65915163fab8e88fdbab85e3be1d9df8564f8a4b2ced088b727aa31d8686465185a428875254f4c58f0d97cfa04953b15f92a2b850e423a2696449a8c7047b48da3b087fb72f991d83f5b69dd2b041e06b844d8c0d597c65d24b767e64626778f2d73116d8e99030588d879d488b7c0dde206f25b043753df9362408a926f071456edd3d6ceb7c674169164e95665ee1bedd1b0bfcf2089b6a942835d50e317f0ef85871efb4e7f5c78d6791bede1b930eba1b2c496f6b4c72b99df76f931267a99b2c6e2b9e5b3da70fb20fbee069041d4710682f97adc39fea17adb2ffe02598dcc4c8a7fe8a83824d83ae70e719afb17fb43ea0977a3c6f410e257cd795d3a28758657f1bdebe9818a3fdce33aa42762565fe06632bb74aa24a1552c3e698e5aa0016a0056f48923d1d8ef55b93fb8ecc3ede992f3279e8a4183231bc32a50e3a779108754b535afbc731a9ce09fe0cb41d4c950f87946235714d28221ab24634497ef50f3148da23750743cecf7728cc1de2427d57a7d224ed97c2edd305b383c67bb33d31f0af57c75e852ea55348ffac2388cd7c29a91eebcc3045eb5d207ff4a899719ab5bc91b7c844fc23a4c95b7baf0538375801c1fa2e2245b4262071fd3db8ed9cd94f23a25a10422288f03509b7920fe823432c772f769b305a26720eebc6d4720b4a52eb2f3833d14655fcf3ae49eea5fc135bf2476cf0e42e9bf1993f544d7eeec2ab2e5546683523db8d72ff0693d5b5ea68096ea00e918e6b10393b0715d7dd8bc7d0170fcff4e353503db231002bdd89bb45b3a09a3c04dc1d42ebe9dae37ee6b342713843728a12401175486a794d3fca6fff689bec6e8f5d1817047d9f6240e8182f6ac61b7001d080766bfe9ba3c27e40fb8d8a20551b515370373742e7b569f38de0159f3397563c1660d6df9b54f8ff8e6201777f8f517e635322ea001f5fbcbd7d712557e26d0c010216d76d00330f1b2aab75167cfb715399966990e5895f42b99e5292469096ad802d2a960f732c4b8100b367f6cd7375a30f77298d5a7b0c95d57cee37417e0adecf70dd9f7287c13e69b3e03fad6ee26330e36c897aedb0268883f3e8b61de3aebf9af1a75fa39de959d0dfbe07fc9d9d62d17cc49c78c74e0a12aed67c7969d3b5d977c8a2758317f0f48cc01818e5b1bb84ad2a0c69b69ab94aed84915ce283641753bff5d9bf49ce1715116ba5919026281265e3c83d3313dd6394f45c1f7a2f35e9048bfd6bf2515f001b01e7207cdb462ee0df0c36572085ae22592fed9f69b02b8bcd9c254912bbad6d0fe7448bab2a39971c2aa95d6cff8334ac9d1373dab74c3591ace5e097246c8c2ceb0211335eb191763a53eafa", 0x1000}, {&(0x7f0000003580)="99deb3d0f03d3bb4d320212f8da406160d0c49ebb21ed9edd7d2b17a2754fc66a3f0fb42203820487927ac5281329c6d2cea187c79842d6e573bcbbe610d7c3bba5d741b9b89e52d83a810f5daaea464e5f4d6d04b99ea1549bab3df0be1c014c7bf8fad858615a93bccee627f643821e4673f3d45c023c9b4d2adb6e9374989b3c661d456b797091c54d6a67fe7e5df1ed0b0300152d9feed4b20287ff1f2a3846aac2565db137b6e51684cc5a14973cd306334520dc0b1d4a20d3ae734b25058b41821a7b8d0e92693acd1932562cb654519c883e897dece3fd569bc9dceed7f8430", 0xe3}, {&(0x7f0000003680)="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", 0x1000}, {&(0x7f0000004680)="efb80f45bc190e77e7bafba49b146473448248f46a98033e169231cb9b812e359dd4260959c229dd85ba3139faf70389b79f68f3a1f292d84ba1b629170c2a082e46da22b93abd0908a62e8e34c64f9e230a6b4d366d8e7b8319b600845a1f10d7fc1a86cfbca8996333904b83531b44e5414ac5ad77a348f189482fc8478559bd73a9ac0f6c1ea031a2d7bef5bcdf0c21c91f2d1b5d8ca17d22c16fd07d0997f1bcf78ba405d39b32866590", 0xac}], 0x5, &(0x7f00000047c0)=[@dstopts_2292={{0x88, 0x29, 0x4, {0x5c, 0xd, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x50, {0x1, 0x12, 0x0, 0x3ff, [0xb60, 0x9, 0x9, 0x101, 0x1, 0x7fff, 0x4, 0x4, 0x1]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x1d, 0x20, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x1, 0xf0, "a7e9a65e7f33e3a43b2c6127985285780f91f5b00908f618eff6534440f3a64479fce76fa2e793a37a1fe092bbf155c134fdcfa878a8800aa4d638f82785e9a1391e2f85a4c6c0f70614f085c94f929f95cb16eff1ab02935e99feff14b662afcff51242107c542a3c37f93a25d290718d82986a85757c96ce29c46b053a93050cda8375b2b5e32087346736ad35a30d7675e18a5106160b458e4237156d98f2e8967b299663075d06755461726c5f0dc976fd4cda2c5c56a8fcc52620b4fcd8b4044978e60b059e6abe0f0923d0c2f3682a7db448ad0fc6cd9f6e2f91c8cc8e3885caec89d89603dd939d7aec4643e5"}, @enc_lim={0x4, 0x1, 0x81}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffc}}, @rthdrdstopts={{0x278, 0x29, 0x37, {0x4, 0x4b, '\x00', [@generic={0x5, 0xe2, "11d0bee9b5a360be6127b8bb1d0514ac85910ea593979e4b7b674f2629325eba11989ae4f7fe54f6347d4c2ef62f31a4ca07ef196e3f8b32f8f6823a19072b623f7905f233634129dc745cd605b42022686c834a363aa930893474f3f7fdf69d3c15a6e72d4a502447dfe5a25e84fe61d6c0e004ca6c8485222225dd7037c0bc9db7a6f1bc1c18058ca3f99006d9c1f1713e536432413cc480ad5c716441b31cbeba2f23997642b68b01937e8e2cc21eedc5a5fcaa901c9242321b76210320a00e17aafc2ca1fb89a33559b5b1aed6dcaf3bc5a881e8240989d612cc3de22a2b0fac"}, @jumbo={0xc2, 0x4, 0x8000}, @hao={0xc9, 0x10, @mcast1}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x7f, 0x62, "3e62ee4b599adf4387c331f7badc875b28e9ec3af21720f4b6b5ba5f5f75e9e304d6d74c3c1edb5bbd9543024dfbc4cdc048e30ea989fd0cc158acc6faf6f86d011c5ab582096e4efbc38872c5ebb1a9e77035c60ef69a1c0aa0a810580111321548"}, @ra={0x5, 0x2, 0x8}, @generic={0x81, 0xed, "513bde30bbeb602a32bfc62f73881d7d65901cc816a138c73b2cfecaa330824670b9e323a0472adb4c9da95363f0971bca46bac0d0f2f9fe572cb52bb0f0d0fe40b231741ddef28f8985c70856bdbac526fc44c056178a2d298718b7aeb2444bc88ba549aaaf080725713c59187a3de5150c89e5dfd21ef6caaf5b8fed1e12cb2562417c45a671d2d9e025c5e6a3d697fc44d8a50c80754a1d0dfec11a236608286483a247314ee38dffaa3dfc5946456a310cbdfde57f4a726bfe676e264288513367a018ca576125a91e1c9950d9576b3a352a518f414c5e06aef309a64af4f628482948c77787587c9436c0"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x460}}, {{&(0x7f0000004c40)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000004d40)=[{&(0x7f0000004c80)="b431a09f23b190e78f2e91418435d0219a", 0x11}, {&(0x7f0000004cc0)="cabada873e1227fd5135dc6ed6dd2d42d6754632cf1175446a365d77f3c56bd35f5e757e90044fc3cea50f8f", 0x2c}, {&(0x7f0000004d00)="b4960c336b51945717a1b0b6254ec49d291c515ca59bd141abacdc3caefc6b4a", 0x20}], 0x3}}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000004d80)="ef9588b95d10ddb910c3ca799ec437db6e25cffd87163d99f5f77cb11fec101ffcfd0f2aacfe2f628731ab6461f50cd5c72373c7f46f5c610d731cbd33dd6cb5e4aaa887cd98a2623c0776849634843df03c17", 0x53}, {&(0x7f0000004e00)="2e32c3debf8d6808629ff0f2d1b3d05ff7847276f6738dcea1d11424de02568a7a1fa25bbc19cfc7e4479001fdefff7b53cb4137a1164af0afee9d2d9d9e160c956d58c379", 0x45}, {&(0x7f0000004e80)="2890c57aad505ac3b8c5e142acf5fc3eb413e6c5afddf5ff4cc2f7f6ce795cc384b1276fe030bb2523dcc0a342be2c811ec1b3472aa244bb385ebd9f6e3a4f9779d35620920ff9b410a3eaf99982acf9a16b6092954af4d7c442a8dbc6359d89e4b53e50bee7d92d5f7083c22bd98e661889c28ab54e4536144ba1f360bb7838e6c02732d8801e35427a67d81a8be68fb620b88da79cc1512f86feef8bb3b7319e232dc2b480", 0xa6}, {&(0x7f0000004f40)="25a3e16e483ac01304a1b3ee7dd42b4871cda92f6d63dc989a88e158586737262eff57ad2dbda91f69b3fe0f9acdcbb63e831fac6c95ba0bb6f7a3466cc1900862c1cee7b3ac68a00f13619f9b514154555eb8dd19785d50deebadd778634ccf942516e7db4780ec06ead45211275f08e948b9d96c907d60b3b02022343380ec183c1b8e5b1c3fcfcb0bcaf7b2e385d7bf36c8860369579fac5e82c6d255f7", 0x9f}], 0x4, &(0x7f0000005040)=[@dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x2, 0x43, "0eab2a693b2733ade4c7666c8f940e6f7396a1bddb9b0bb290859b55b00a8cb25a37720b5e778ecd2dc112c538fc7f1e0051d53a093c3584f6d8e70f9805622ffee44d"}, @hao={0xc9, 0x10, @remote}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r7}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2e}}}}], 0xc8}}], 0x7, 0x20000004)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x6901, 0x0, 0x0, 0x3ab}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x8, @empty, 0x200}, 0x1c)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00')
syz_io_uring_setup(0x7446, &(0x7f0000000080)={0x0, 0xdc3f, 0x10, 0x3, 0x8b, 0x0, r4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:00 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x1ffff000, 0x0, 0x0, 0x0)

13:52:00 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x11000123)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xffff, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x7f, 0x5, 0x0, 0x0, 0xa4c4, 0x420, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x800, 0xffffffffffffff00, 0x8, 0x6, 0x7ff, 0x3c, 0xdeda, 0x0, 0x1, 0x0, 0x5abe}, 0x0, 0x3, r3, 0x9)
close(r3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8, 0x10, r0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = fork()
ptrace$setsig(0x15, r5, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
fcntl$setown(r0, 0x8, r5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2800, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ae, 0xfc47, 0x0, 0x0, 0x0)
r6 = fork()
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ptrace(0x10, r6)
syz_io_uring_submit(r4, r2, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd, 0x0, 0x0, 0xffff0001, 0x6}, 0x1f)
ptrace$setsig(0x15, r6, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
waitid(0x1, r6, &(0x7f0000000240), 0x1, &(0x7f0000000340))

13:52:16 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x22, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:16 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/,+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:16 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x600000a, 0x100132, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:16 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r3, @ANYBLOB="a532973a00000000195da84ce8653000"])
io_uring_enter(r5, 0x369f, 0x3c8c, 0x1, &(0x7f0000000080)={[0x2]}, 0x8)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:16 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

13:52:16 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x30, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7ce761c94bfce2b7ebb0cb6e735966", @ANYRESHEX=r6, @ANYBLOB="2c776264069ed022daed03c78da9b13d46b3f2d7f96fe3e92c23f2779664025c97e2bf03fb3207ccb5", @ANYRESHEX=r7, @ANYBLOB='mmap,obj_type=\x00,dont_appraise,permit_directio,obj_user={3\\),\x00\x00'])
ftruncate(r5, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000)
syz_io_uring_submit(r10, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x4000000, 0x1}, 0x0)
syz_io_uring_complete(r8)

13:52:16 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x42c7, &(0x7f00000007c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000010000001800000000", @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB="ff070000000000002e2f66696c653000"])
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000780)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r7, &(0x7f0000000700)={0x400002, 0x11, 0xa}, &(0x7f0000000740)='./file0/file0\x00', 0x18, 0x0, 0x23456, {0x0, r8}}, 0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_setup(0x1dae, &(0x7f0000000080)={0x0, 0x7958, 0x0, 0x0, 0x2fa, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140)=<r10=>0x0, &(0x7f0000000180))
syz_io_uring_setup(0xc38, &(0x7f0000000240)={0x0, 0x66c5, 0x0, 0x1, 0x16c, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000540)=""/89, 0x59}], 0x3, &(0x7f0000000600)=""/5, 0x5}, 0x0, 0x61, 0x0, {0x2}}, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:16 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise, 0x22}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:52:16 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0)
io_uring_enter(r5, 0x4b4f, 0xffe2, 0x0, &(0x7f0000000240)={[0x6]}, 0x8)
sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0800010007000000"], 0x109c}, 0x1, 0x0, 0x0, 0x4000002}, 0x48001)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:16 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620d, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0)

13:52:16 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)

13:52:16 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80802, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r0, 0x10000000)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000100)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r12}}, 0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r0, 0xa48, 0x0, 0x1, 0x0, 0x1, {0x0, r12}}, 0x80)
r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r13, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:16 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x20ffb000, 0x0, 0x0, 0x0)

13:52:16 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x6abe, &(0x7f0000000080)={0x0, 0x9643, 0x2, 0x0, 0x1b6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x6a9f, 0x752c, 0x3, &(0x7f0000000040)={[0x4]}, 0x8)

13:52:16 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x4236, 0xe2a8, 0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:16 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=<r4=>0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x9, 0xff, 0x1f, 0x0, 0x5, 0x40, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x4801, 0x2, 0x5, 0x6, 0x100, 0x5c, 0x3, 0x0, 0x2, 0x0, 0x2}, r4, 0xe, r0, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:32 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xff600000, 0x0, 0x0, 0x0)

13:52:32 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x22, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:52:32 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x2c, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:32 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r1, &(0x7f00000007c0)=""/180, 0xb4)
io_uring_setup(0x32b7, &(0x7f0000000200)={0x0, 0xe25f, 0x0, 0x2, 0x3ba})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r2, &(0x7f00000007c0)=""/180, 0xb4)
r3 = syz_io_uring_setup(0x620e, &(0x7f0000000300)={0x0, 0x836c, 0x2, 0x3, 0x333, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
io_uring_enter(r3, 0x7988, 0xede4, 0x3, &(0x7f0000000040)={[0x100000001]}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x13, r3, 0x8000000)
syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x5, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}, 0x10040)
syz_io_uring_setup(0x43bf, &(0x7f0000000480)={0x0, 0x23ea, 0x2, 0x3, 0x196, 0x0, r5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0xb0a44c19c45cf9ae, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1, 0x10010, r4, 0x8000000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r6 = openat(r4, &(0x7f00000000c0)='./file0\x00', 0x2, 0x140)
fcntl$dupfd(r6, 0x0, r5)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={<r10=>0x0, <r11=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r8}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000014c0)={0x0, r7, "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", "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"})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r12, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(r12, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x3a7)
syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x48b83)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&\"'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:33 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_io_uring_submit(r4, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd=r8, 0x2, &(0x7f0000000340)="fbbdfbe33f40e9659375e6ce5bb3dd2f56b71e5aea62b77c2d0c66589c3f2a09b97cda122596100b848227f521c0eb13b69209c57927f2c83b3a5d6171e6b1fdcc730e47a9d9e2023efeb74805a06cccd0b7cb99ebca5ae1dc16d23e8cb6929a499b4805bab5702986bafe36553944425173a0c8f4ecad7bb8e28b23a85a99024c924610084dc5519d2043aa223e9a45451101edf2166c45341b7418f3100fed7004da", 0xa3, 0x4, 0x1}, 0x3)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="f00086af312b2593b1964df18bc6f900"])
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r8}, 0x1f)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2000, @fd_index=0x3, 0x9, &(0x7f0000000040)=""/52, 0x34}, 0x2)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0)

13:52:33 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r7, &(0x7f00000007c0)=""/180, 0xb4)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000240)=r5, 0x1)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
io_uring_enter(r0, 0x630f, 0x475f, 0x1, &(0x7f0000000080)={[0xff]}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:33 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2002, 0x3, {0x3}}, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = io_uring_setup(0x8e7, &(0x7f0000000200)={0x0, 0x5558, 0x2, 0x0, 0x3cb, 0x0, r0})
io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3113.836088] cgroup: fork rejected by pids controller in /syz4
13:52:49 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x6e6, &(0x7f0000000300)={0x0, 0x0, 0x20, 0xc}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0)
close(0xffffffffffffffff)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
fallocate(r4, 0x14, 0x7fffffff, 0x5)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r0, 0xb23f8000)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)="30ee142431ec1e26b0b643e1315047991199e0231f747a49ec3db77a76d294428004cd0910ef7b4d454f889061c612d86fed0b02cf73e286b820845891e79de8595aab75727e48dae8425d0f6d82fb4bedde4275e890c0c119f4a71f5b99c568f93657c3613900486237b04c706155df0135a70e472cb98152fbb3e00b47304d92b1b3f5c6ba27061898ee028122cc6b8940cc6feaf5601df2def7b7a3", 0x4, 0x0, 0x0, {0x1, r8}}, 0x7fff)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204662, 0x140)
write$P9_RREADDIR(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="e4000000290100070000000400000000030000000000000000000000000000080647002e2f66696c65300202000000070000000000000004000000000000000107002e2f66696c65300001000000010000000000000099780000000000000307002e2f66696c653004030000000500000000000000410a0000000000000407002e2f66696c65300002000000000000000000000005000000000000000407002e2f66696c6530080400000002000000000000000800000000000000d807002e2f66696c65301004000000030000000000000007000000000000000807002e2f66696c65303b"], 0xe4)
r10 = fork()
ptrace(0x10, r10)
ptrace$setsig(0x15, r10, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x5, 0x6, 0x4, 0x4, 0x0, 0x2, 0x60900, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x14054, 0x4, 0x1f, 0x3, 0xce, 0x8, 0x8, 0x0, 0x9, 0x0, 0x800}, r10, 0xe, r4, 0x2)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

13:52:49 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&,'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:49 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x253}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000500)=<r3=>0x0)
r4 = fork()
ptrace(0x10, r4)
ptrace$setsig(0x15, r4, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080))
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x290940, 0x0)
preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/179, 0xb3}], 0x3, 0x800, 0x81)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x120, 0x9, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_vlan\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x7, 0x1a, '.\'\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'btrfs.', '\x00'})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="401600003300000126bd7000fbdbdf2500000000050053000000000078107e802968e97cf396d9b61c43ef8073692ee606b26276b729aeadfd8da088adbb916c8e63f312269255aaa5d106dce4d90f9a32590692c5dcd28c6a75299ba16dfd4cf1ee378844e145a6d883a59fe422474118033234631cfbeef79bd03ed2874b1beb85f3400d2284c2760c707308003000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00k\x00', @ANYRESOCT, @ANYBLOB='\b\x00s\x00', @ANYRES32=0x0, @ANYBLOB="9f044b800400100008009500", @ANYRES32=r0, @ANYBLOB="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"], 0x1640}, 0x1, 0x0, 0x0, 0x1}, 0x850)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x2c, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:52:49 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '\"&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:52:49 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
splice(r3, &(0x7f0000000040)=0x2, r4, &(0x7f0000000080)=0x8124, 0x7, 0x5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r9, 0x4)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x428f, {}, 0x4, 0x9}, 0x0)
syz_io_uring_submit(r7, r11, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r0, &(0x7f00000007c0)=""/180, 0xb4)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x400)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x20010, r1, 0x8000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:52:49 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x7d05, 0xfffffffe, 0x3, 0x0, 0x0)

13:52:49 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="d7"])
fsmount(r1, 0x1, 0xa)
r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
io_uring_enter(r2, 0x20fa, 0x8eb0, 0x2, &(0x7f0000000040)={[0x8]}, 0x8)
syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x7f, 0x0, 0x3f, 0x0, 0x4, 0x10008, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x538a00, 0x2, @perf_bp={&(0x7f00000000c0), 0x9}, 0x100, 0x200, 0x8, 0x7, 0x8, 0x2, 0x101, 0x0, 0x8, 0x0, 0x800}, 0x0, 0x10, 0xffffffffffffffff, 0xb)

13:52:49 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
lseek(r0, 0x100000000, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x8)
setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000080), 0x4)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x60ff, 0x0, 0x0)

13:52:49 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r4, 0xff, 0x0, 0x0, &(0x7f0000000140)=0xffffffffffffff06)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4090, &(0x7f0000000040)={0x0, 0x4635, 0x1, 0x2, 0xfffffff9, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='trusted.overlay.nlink\x00')

13:52:49 executing program 3:
r0 = gettid()
perf_event_open(0x0, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x1a21, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:52:49 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x80, {}, 0x1, 0x6, 0x0, {0x0, 0x0, r8}}, 0x1)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

13:53:06 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, ',&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:53:06 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}, 0x22}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:53:06 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '\"&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:53:06 executing program 3:
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 4:
r0 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x301001, 0x47)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
write(r0, &(0x7f0000000300)="92ba06d5844103739a8a5cfe86a6c3cc4e27712694cc3b429328b1557886aa4cb3997e3faed9c870866b9f02818715106d0e73911a657bd5c6922ef49549272bb76a34e767be9fb78e617133716264c3ef1c737e925fc27a16fa249df7bd4efe34a0504fd6b1eb38de6ac1b83ca0328453b01374aea00c0b7eca648522287e57fe42f886ac7d7a1c88dfb63c5f95d89a46de8b40362f9c4e909263dbeb7f5c2f21aadf74db32812eb119f81da780dd2e3eeafca04b8adbd928cfe9cccc8a047720066c1d90fb5aa8", 0xc8)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000e, 0x110, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x6)

13:53:06 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r6 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x400000)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000080)=r6, 0x1)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x61)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x10000000)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
dup(0xffffffffffffffff)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x5, 0x101, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x1, 0x2fb}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_setup(0x48f6, &(0x7f00000004c0)={0x0, 0xbb3d, 0x2, 0x0, 0x240}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000300)=<r9=>0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r4, r9, &(0x7f0000000480)=@IORING_OP_WRITEV={0x2, 0x3, 0x6000, @fd=r10, 0xffffffffffff63ca, &(0x7f0000000440)=[{&(0x7f0000000340)="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", 0xfe}], 0x1, 0x8, 0x1, {0x1}}, 0x2)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0x10000000)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r11, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x4)
io_uring_enter(r0, 0x58ab, 0x7cff, 0x2, 0x0, 0x0)

13:53:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xb0ff20, 0x0, 0x0)

13:53:06 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000200))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r6, 0x400, 0xc7d, 0x200})
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0xfffffe01, 0x8, 0x8, 0x40, "37b740", 0x7, [0x3, 0x0, 0x400]}})
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xf0ff1f, 0x0, 0x0)

13:53:06 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800006, 0x8010, r4, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000200)=r4, 0x1)
fstat(r4, &(0x7f0000000080))

[ 3146.708898] cgroup: fork rejected by pids controller in /syz1
13:53:22 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/\"+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:53:22 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x1ffff000, 0x0, 0x0)

13:53:22 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x600400)
io_uring_enter(r5, 0x7a50, 0xdd78, 0x1, &(0x7f0000000080)={[0x10000]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:22 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, ',&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:53:22 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x358a, &(0x7f0000000200)={0x0, 0x800, 0x4, 0x0, 0x222}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r4, r5, &(0x7f0000000a80)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, r6, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x0, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="ae196ea636d7554e8d83806c177d1ce89eb34d67b0e05041808e8622bb6cb3948a28ee9ec9183220e2e4c4792d7d3b013224eccca7f8c666d9cd8d06b0dcc1143be2715d78c7e522a3dc7692b21bea1c8047d9405a01f74c539f6bd9c9267afac7e1cb0cbfbbf331f61dad25b67aba4fe26284f010fe1207db9be609a2e92ebee94f58eb4e321c5e0f6577c40cd596644525ade74e8a9c3310f4675347826da8725d426c63d892611e028483cec727dc566a674f405c2e5609710eb0c570fef7f28c46ff92", 0xc5}, {&(0x7f0000000480)="6b243f98652971bbf3aa59b74aee3aaaf7ff8722dd8411a7ce2237d4784b15aea3d005d6179d2900ed14b37b550babe67150a5", 0x33}, {&(0x7f00000004c0)="af09a5bb22aca37a2ad2e6125917a5a67cb6461cc8a1a3a9679a030350538a0cd831f5dbe1b885ef5da59b7f95f1aaab832e4e7b200d67e020a9cf64eed79ac6d5c0aacdf7c3064ef13fbf34f5ff56663c89c12da89191c88124bda5ed30390bda608b1fa1dfb55de20bc82c54f57833e14470a078f90c", 0x77}, {&(0x7f0000000540)="e675596d36315d1483b85d4b2d28ac4349ac38339adef7ce18da9e16d4a720fd0b64a0f9f6891cf260cd549e46bb1da2e6bd21651429c1b22f170c941189b1c19d7649c56cd30e237f2d5423804cbb", 0x4f}, {&(0x7f00000005c0)="d49c0ca7dcf643f0a7d4285afa3e10c50fe54b3bc1507e131afd2cf80502f78a1a34fb2b6685b46dc8b2f38c424a4f7250aaecc864f886aac7", 0x39}, {&(0x7f0000000600)="f18c200668a9d186b3b3d798d1f2bc2b5a853a607f6855aaf52a8c0247519c662c4a0f62d52fd2a7e860dab9dd2f9d3609b027e3e9d76a9ff720bcaa3d91b4204a088fb3811c8c0da79756c9b5902150a3d517b1237b85782ceaa230d3df68e7170ea83e1105ad55f47813d98651bf069f629a4e4e0f612cc76b6d5f3f42123ef59033abef86ea72328f386f840444f48e8610d7b2e80f5bf332b18a3816ddbacac3da81f75214e0a69c393a0eafa03e", 0xb0}, {&(0x7f00000006c0)="5296ea8b8e238893fb24cb5005bba8df4b9c003f2722f086031e6522925496ee9f4277863b66c6469bdcf60645b909a487891cbbe19f06752bfb6887c92c15f75e", 0x41}], 0x7, &(0x7f0000000880)=[{0x60, 0x1, 0xdd, "d3f51e7114a5bb62eefa08396e07fbfd2fb62d1ad07ea53f1d9864931d5fc6a979f9e592c666e9d5e5b99140d711244a9784b3b4e34fb682128e557ab3e5ac802cba0074949fe5357026939c5f"}, {0x90, 0x10e, 0xffffffff, "75580b4b2289e770c9c921022f72066ad27788cf811a11f9929c118587ea54f5910c411dab3be1303ff9bae45b16e78d6da62332e7c5f522828a4dc033dc5d30338a5335344eba06d6094f4be4b45f591bcadf5edf8868c8b2305eee4132bcdb1ac30c8249d09d95470f1e6dd394290cf530a0fe55a21d38b9"}, {0xa0, 0x103, 0x9, "cfd69d4326d3dc557d0a7fa1e4b1b19d2642c46e44807fa6d8d400d4caca4124a56b12d218c3f28b771c03f0ef8bebb63c468bd7979962f17f3725e9b7127a54f4c1c034d2cbc2d4f7c6c196e7f1c0bf8d5b6f8bb95e44205317e5fcf0e3e68a45d909ae64cc80de1b6903234bc481e1bdfe351fd0d6a6c9d98d2690fc4d65448eec27c2c1ded22346eeeee524"}, {0x30, 0xff, 0x4, "73172dbb754dbc6fdeb51a917ce7286444f9e662a331252f434acdd21ecb"}], 0x1c0}, 0x0, 0x8860}, 0x1)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r7, &(0x7f00000007c0)=""/180, 0xb4)
io_uring_enter(r7, 0x4468, 0x3c4, 0x3, &(0x7f0000000040)={[0x8]}, 0x8)

13:53:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x1ff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x2010, r0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000040), 0x1, 0x1}, 0x5)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:22 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r3, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x198850, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2000, @fd_index=0x4, 0x8000, 0x0, 0x0, 0x1c, 0x0, {0x1}}, 0x80000001)
syz_io_uring_setup(0x6f81, &(0x7f0000000240)={0x0, 0xd468, 0x2, 0x1, 0x272}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(0x0, r7, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5)
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0)
close(r9)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:22 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt, 0x22}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:53:23 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

13:53:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:23 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
syz_io_uring_setup(0x4230, &(0x7f0000000040)={0x0, 0x753a, 0x0, 0x0, 0xda, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r4=>0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xed64efb41993964, {0x0, r10}}, 0xb4b2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:23 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x20ffb000, 0x0, 0x0)

13:53:23 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x81, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x76)
pidfd_getfd(r4, r5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x5, 0x4)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:23 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xff600000, 0x0, 0x0)

13:53:23 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
fcntl$getownex(r4, 0x10, &(0x7f0000000080))
close(r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x6bb8, 0x0, 0x0, 0x0, 0x0)

13:53:23 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x1fe7, 0x20a7, 0x1, &(0x7f0000000040)={[0x200]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
r7 = syz_io_uring_complete(r4)
syz_io_uring_submit(r1, r2, &(0x7f00000008c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x1, 0x3, 0x3, {0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="2a79d079f79c4740e2f765d16bc3cbdd1d47902c83ac7376f4df3d1c636842c4d9764a9e2a782d8c242e3b7fef4ef5aca53aade9601bcf867b86be21f440ea134e3f9bce655aaa9290d39c341362fcf1fba9f3891179811b9b8d7a724100abca04e95a01216667ebc705bed7952272007288bddeb8a9fa907aee47b67a16cc47ba4c00f7c62397a2940d20e02872ef5c162fc2688610482556f7682de7f23795ecdbfcf1407dc3e892426c6be5fd8a3897aa82d3", 0xb4}, {&(0x7f0000000400)="e9ba8548dc9a97ad4bbc3e0f48bf9eb633db9b1424cddfb05624de44e1f48b17eac5f4196fa7367ca1c6ab97d111cb1636e742d0a89a8683502ceb9d1437e3e6b195dc04eb91fc20e32f2541668a32596da995e3142c79ffe963d8b2b25209b5d12ea098775ca887fe9e8d319f9ae27cf5f467ef7b98a7b11917e65e69285f3ec8f622170ee5987868e7d48f1c0af9cb6f6fa9231a51b020764f44f9b4c59f6d7a2b88edd5c9ad4bee4e577f935208b5021dcc48a2951181226a446ecebdafb466dfc0bc40dfcb722d0523712af6b043c3ddf9efdab98cd53ec27865ba1c15ac5a5f62d20a68", 0xe6}, {&(0x7f00000000c0)="6f824ec909c702cede59a4e1e3652d9940d6c62a25ae770b71e99758e4eb09", 0x1f}, {&(0x7f0000000240)="e32a333a1524bff8208c88bbb07d45698bc77123741793afa042cbce8c97e543703d8118dd0500d7eed43a29b96d7a4db659ae54b6d7cd972ccb835bff995d36c3a6e63f56bc3b6a2f04b6ee66352a9483adbfc6bc23", 0x56}, {&(0x7f0000000500)="494f1573ab48c329904d2bda0d9a396a553f2bfaa805475022408a6c3ecb9c4b1c63", 0x22}, {&(0x7f0000000540)="db482402051cbf9c0bf26d0b3503ad6f3e11cb5211549f3a306f929e46fb644bf01fbef1500ce05071915a5999948b6836df83023fc67fa9e25ae9", 0x3b}, {&(0x7f0000000580)="d55b98b5e29947ea3cd9941b3fab8fd4781868b30dd246c536bf4a9b1ae41aa4a0247e5d46ca14c7a73c2dfb97e56c645f80c9630b60438ae29d5b59cbe5e28f3031839ad8e7908d993e102fc02d7a56eb7c5171349cd42dca8f1206ae9ba355036aca456051ea08c50824b390c8b5bb2ba2c7a8abf74eca3d33fd6905d5c771bea648763ff7d6713c48193a0312c90e949644df09d6dfcd2810418446ca9c643a22733add424c75f998bf7273f028ff6c97898ca41d1c64169f01b3a8128cbbccc0549d1962ed57c053819c45e5a3e7eb4227785d5ce6eb", 0xd8}, {&(0x7f0000000680)="10deff0755e7dd957f7756846bc149cf1383be1745e4c824a3d111fb06dd0ef00a08b601209329f6677e1de5bcbb7311d1d68254bcf1ec41f71e0bf885b333fbab2a2543083c60ecf7d018cb1135a5686db66c943b1bef6978110c698241d3c41bd16193b853add848f65e69f98d006aa4fb61f763b29b75", 0x78}, {&(0x7f0000000700)="9745f479fecd70a0f8ed84f1a0c39c2b4c17f1a78802e068277894c5e32f007d679763256bf7bef8363ada9a241572b4bf51981c8ca14ae93af40bff7d0ea165a54d7cad32b092e7fdd2d649ec280a3c10f4f1e8086111cf854ce27f8cff014e66c08d8d485fb53fbeb59752dbfaca2636f96a1777ef88e23b4629460e0af6c8b6a42e8eebad68c941a2814878ea1e439b3ca809bf", 0x95}], 0x9}, 0x0, 0x888, 0x1}, 0x7)

13:53:39 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/\"+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:53:39 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash, 0x22}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:53:39 executing program 7:
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r4 = syz_io_uring_setup(0x2a6a, &(0x7f0000000040)={0x0, 0x7f95, 0x8, 0x3, 0x391, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x7, @fd_index=0x1, 0x7c, 0x8, 0x401, 0x18, 0x0, {0x1}}, 0x10000)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x100010, r4, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r7, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x10000, @mcast2, 0x8c}}, 0x0, 0x0, 0x36, 0x0, "fb8578e52c1c106beab494d8f78a143c1415108aabfeaf8047cdc3de10a69c3872fec12aacc914d7117d410e08785e665e483795797f870e430086e1b48bace2a99047c6c6845c0bbd68fd77ef90d4c5"}, 0xd8)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x810, r7, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r8, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x40}, 0x1}, 0x6)
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x98002, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001980)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0), 0x3b, &(0x7f0000001a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x238}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@remote}]}, @ssrr={0x89, 0x1f, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2, @local, @private, @broadcast, @remote]}, @cipso={0x86, 0x1f, 0x0, [{0x2, 0x9, "589a77a68f6d72"}, {0x5, 0xe, "f6cb2514b3697262f8251e7f"}, {0x1, 0x2}]}, @noop, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x4, "6b05"}, {0x1, 0x9, "b5f12bcb89500f"}, {0x5, 0x8, "18bd19a693e4"}]}, @lsrr={0x83, 0x23, 0x0, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xc1, [@local, @remote, @local, @multicast1]}, @lsrr={0x83, 0x7, 0x76, [@multicast1]}]}}}], 0x120}, 0x8000)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x4}, 0x14)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x10010, r1, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r9}}, 0xffc)
syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kernel', 0x2040, 0x30)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x9)
io_uring_enter(r10, 0x32f3, 0xbe31, 0x1, &(0x7f00000000c0)={[0x5]}, 0x8)
fallocate(r4, 0x6, 0x2, 0xfff)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000, 0x0, 0x0)

13:53:39 executing program 4:
r0 = syz_io_uring_setup(0x3931, &(0x7f0000000180)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x8000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r10 = memfd_create(&(0x7f0000000040)='@\x00', 0x3)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r12 = fcntl$dupfd(r0, 0x406, r3)
syz_io_uring_submit(r5, r8, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000080)=[r3, r3, r9, r10, r11, r3, r12, r0], 0x8}, 0x5)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/,+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:53:39 executing program 4:
r0 = syz_io_uring_setup(0x1a4f, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x4080007}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2a, &(0x7f0000000240)=0x9, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, r9, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x4000055}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r3, 0xec5f7000)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0)

13:53:39 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x32000, 0x0)
openat(r4, &(0x7f0000000080)='./file0\x00', 0x400800, 0xa)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:53:39 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x229, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x250040)
io_uring_enter(r4, 0x62f4, 0x16ca, 0x0, &(0x7f0000000080)={[0x17]}, 0x8)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r5, &(0x7f00000007c0)=""/180, 0xb4)
mq_timedreceive(r5, &(0x7f0000000240)=""/126, 0x7e, 0xfff, &(0x7f0000000300)={0x77359400})
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/kmemleak', 0x202542, 0x10)
io_uring_enter(r7, 0x7f83, 0x55cd, 0x2, &(0x7f0000000200)={[0x100000001]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r8 = fork()
ptrace(0x10, r8)
ptrace$setsig(0x15, r8, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
syz_open_procfs(r8, &(0x7f0000000340)='net/sockstat6\x00')

13:53:39 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x60ffffffffff, 0x0, 0x0)

13:53:39 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}, 0x0, 0x0, 0x0, 0x1, 0x800000000080000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x1, 0x100010, r1, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x240040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_setup(0x34b5, &(0x7f0000000080)={0x0, 0x79e4, 0x1, 0x0, 0x362}, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3abc)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000400)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xe9, 0x2, &(0x7f0000000300)="5d75999e9c6ec15b4bdb11dc1c47b7fb3b0d8fbd7746d8606aee98b63b4bede0c7477459d3499522229fbed103fb28c51b5d5164e3624ef55a26730fc2496ec7ddfe82aa00900d4defdd195abe5950dc0d5eed089aec748bb9c33f3457a4a32799d31c80854072a2056c83ac08f7cf102ed630e42db7f4ae20dc9dded4c2821b51ed2db89ad9f1f709ba875c27a076dd78a92d4c259960623ac011240a436a67e2dc93b1b71805b4870d6d7c066191ab1d17b773e5d7df8d415a011e99400d970c9443c27947816c1d5f4ea2c1c45961693a8ef1c6a43e352ed4", 0x8}, 0x10000)

13:54:02 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x22, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:02 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&\"'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:02 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x7f27724cd000, 0x0, 0x0)

13:54:02 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r6, &(0x7f00000007c0)=""/180, 0xb4)
setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000200)=0x8000, 0x4)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1170}, 0x0, {0x0, r8}}, 0xfffffffd)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x4010, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r10 = syz_io_uring_complete(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r10, 0x0)

13:54:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3b5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/,+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:54:02 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0, 0x10000, 0x0, 0x0, 0x2}, 0x1f)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x7f27726cd000, 0x0, 0x0)

13:54:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r4, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x7f27734cd000, 0x0, 0x0)

13:54:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x59)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040), 0x4)

13:54:02 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="08000000000000fb2d2f66696c653000"])
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, {0x2}}, 0xe6a)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r8, r2, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index, 0x8, 0x0, 0x5, 0x2}, 0xcbd6)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x420280, 0x100)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x20, 0xe1, 0x3f, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3c, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x2011, 0x3, 0x10000, 0x3, 0x100, 0x3, 0x7f, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r7, 0x0, r5)

13:54:02 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x3167, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10010, r4, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:02 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x7f27736cd000, 0x0, 0x0)

13:54:02 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x400}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:18 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&\"'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:54:18 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r3, 0x1)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:18 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0)

13:54:18 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xc5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r3, &(0x7f0000000040), 0x0, 0x0, 0x80000}, 0x8001)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x46e2, 0x0)
ftruncate(r4, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10, 0x1}, 0x401)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x2007, @fd_index=0x3, 0xfffffffffffffffe, &(0x7f0000000740)=[{&(0x7f0000000340)="cc75006d0496cb9eaf2a58c407b0ec72bbf2d625f251126662856d469dbf9859112052aab0ff", 0x26}, {&(0x7f0000000380)="d7592af3a06f94366dfce7deaf32e9a3592fad540f6e9041096d0ae12d651eb6837ac8f5d59aa2bcc4a1b9c604e131af85823de0a9eacdd81ce6f652140127bbb19db59cd7b471b16a3e667203026a573b666ab729d199588f7d7e23311337baca9c90576a3a41942986f4540770261a4e7190ab750496403b32e40677ac916989cc544db0d791796cba43f04a88abc4c073fc020b0540e69803bb9a4d7e5cf7e09831c2507d57d67e9e82ce36ecc331545cfea3", 0xb4}, {&(0x7f0000000440)="38f616f707ba215f0a2bb033abd28e13c8f91a88899c16c847f460f96141f3398eca6c6c16780ec514656adc971415838da0152066b3e9af5003fdef7d9d0cc3c28ea97add5f2faffe1f4590c6ab80c132cca4de0c35170f56344efc", 0x5c}, {&(0x7f00000004c0)="a3931772c779ba4d5e91a372619dec3e832e88", 0x13}, {&(0x7f00000007c0)="90738c9938d169a401aba033f4871ecfdf0e0fc6281e16270f9f2ddc5cfbf6454e0600219ce1edd03522a10ba7e5611654f313f3d0d025f2203f2747965d912be17145ebf03929821a33b4aac7924a31dff89fa252c5b85fc6ffff69cc4c1f5773489c2873506336151dae77ea7cdde8bcab9b0b2c7c9070f1370600000078f102af98a3af06000000a981ef2a731b196f639c469285eca0ab0e4f5cab28c18026b3e17a76255436f53c84f6d89f914490e6c3356756819a7df20d13e10d30eeb94677506ba1e25d6f81cf087e5d", 0xce}, {&(0x7f0000000580)="395c62180ecc7c4a0f4fde298ef2967ec063da966d18834db0e127e928ac34cb78814b69b11ef5515d8c36806fc45ff5aa0010000000000000d93de45c270a5ced88ae677ea96dcf96db9ce9f2d9fa8cad54ceaa5f088c350d36348b12816074097813a6847651520db620684d6268836193c4", 0x73}, {&(0x7f0000000600)="609ba8c1ba93f60e49ed99ea2eca502086840dae939e84b59606fd1f06b76f2f5a7eee91fa685f59ed7da8f71d015950beafaa0d4f9e426d6eec86993c15d8b265560409f8bfae7e7068120af82ff6f73f122f23b6f2fdd819917367930919796fe24570a0336fbcd5c068b04d2e07abf5209785f87ac7d48e3fc9580f078ec410483e976d227d253561b18131b44fcc1d9f47389dad7c9ff98c15f52103d2d5d05e7cbed461676f9c804c987fc18dc02d85756b93c49ec584e83c2aec89cf2321f7bcb5c89deb27ed318e02c4b73b9a5bed747ea3da75b392459d81b2355bd2b0ddf5b0", 0xe4}, {&(0x7f0000000700)}], 0x8, 0xa, 0x0, {0x3, r8}}, 0x7)
syz_io_uring_submit(0x0, r2, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x1, 0x4007, @fd, 0x6, &(0x7f0000000500)="8a71a5b9fb491268f94d55460df4ba1a8aabeea1c3f18e420eae6213aa9b69ebc7dd2accb32fa3e315d85e5248b777f2ec33bc9ae066ba68367e2f431b10b11dcd2c21c5f8889229b362614bdcd7e6bdde", 0x51, 0x1a}, 0x1)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @sco={0x1f, @none}, @l2tp={0x2, 0x0, @multicast2, 0x2}, @ethernet={0x6, @local}, 0x7, 0x0, 0x0, 0x0, 0xfe01, &(0x7f00000000c0)='gretap0\x00', 0xfffffffffffffffa, 0x4, 0x9})

13:54:18 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0xb77}}, './file0\x00'})
io_uring_enter(r5, 0x7602, 0x43cd, 0x3, &(0x7f0000000080)={[0xe25f]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:18 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x2c, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:18 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&,'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:18 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x8000}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x5)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:18 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

13:54:18 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:19 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x6e6b, &(0x7f0000000040)={0x0, 0xa4b1, 0x1, 0x0, 0x1f1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000200))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r8, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd=r9, 0x8001, 0x7fe, 0x1, 0x4, 0x0, {0x2, r10}}, 0x7)

13:54:19 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = fork()
ptrace(0x10, r5)
ptrace$setsig(0x15, r5, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r3, @ANYBLOB="c99caf93aee16b02c502cacd10c16bcb07b7257299930f9f240f1c1c12a5ef08cc8dad484b8cc5b2a61651a357754ce2865079bb5f165a04aed8d85c41e1849d75a8ca2c4e197c2c5943f098b2c79245625314da1646c6b8efc8b21765780842619400a2200e9a74ee5199019b25b96933e0aa59e030349308154cbf71c12fbdef90d185f42e91dfe4f8417513f0c7b99032686803e35eebe2b54db1f7e77929fbd92733fcfc2182cf29cc"])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r7, 0x4)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r7, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, r9, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x401, 0x3, &(0x7f00000003c0)="8f6bd7d580698ea361997f4816b56de9d39c7ee05d902636e16c60a2b991030b40354640e795aa12afce557aee3dad2cd22f62db7e635b94750ce5512ab6a2f62201b1d6cb3ab563eb6411cf0322f9b1c8261e3c733814bf053a4ddf4fbbedaa9ea2a5e9f35137b9aa9f1c69e5573152f429ca1efa7b76c9b7a1ef2bff981a8ff2a48e4e7ad37e658bc9f390059f0c0cb665aa52ea6ad64c3096ec51a360f66d3fa8511a0592", 0x3, 0x0, 0x0, {0x2}}, 0x7fffffff)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x81, 0x5, 0x6, 0x7, 0x0, 0xffffffff, 0x4880, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffff800, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0x5, 0x0, 0x4, 0x1, 0x9, 0x6, 0x0, 0x1, 0x0, 0x401}, r5, 0x10, r6, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:19 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x400)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r9, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r10, 0x9, &(0x7f0000000340)="e8b1242baa883b26dab29c9adbae681c57745012244b690e958d78ee066d822f2d271df45672cbab27725a47a9c643f94f7c3c7a036ece526888c73265f76ed741fcaf98471b2edb00337ca58d0e1667eb294114c6a0", 0x56, 0x1, 0x0, {0x0, r11}}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:19 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4182, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f00000000c0)={0x200202, 0x8, 0x1}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6)
r6 = syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x4, 0x6, &(0x7f0000001800)=[{&(0x7f0000000440)="bc00df5eb28ee66866825c8d6448d16b61d7b87bdc5215896207589d91e271dbc8802599cd34b22d916f2dd9ece733bdd3e6b64163753cbcb4bf665731ecfa6fb8a33ee0a75467958ccbd8df802593b20d7c28ae7f02158fa3e554f624ec96325651a3363ba855beaef4662e92bfe0957fcbe0479818aed309ec0c581c443d51217ca7e71d538a2a8e907b2c2ef8a50693c7c70db4a7041ccfdfaa87189d9556cf906457a7b30c9411c9b48189ca5e273a4fed84ec7222ce289951385cd17f5d10b6e37f21aa65da30", 0xc9, 0x25}, {&(0x7f0000000540)="6cce4a9a504be45558ca038b620615e3b5dfa0d39378d736c30278dfa3fc22a22d394262d0c43ff7f173b884c41d78be699dc76e4aad864bf59d7746724ccdb217722825a794bddfbbb875d6dc588f0b932d25421a916150a6048341bf569a040689181097c60e95343c8915", 0x6c, 0x9}, {&(0x7f00000005c0)="44167ba9de55afb0f8588de30fba75c062be86096903ae69a99a147f9dbfd2308a959dfe3c01830883c71a43175d16e82532160db299e8109e73fe4fe204dea4025d8eb2c522afdc09bd335cb6231039a920160555a1297e80aeae982f9206b37d1102a766866c7b48280bfc8d06cf8577232a5a96a8486bb7a3fc8a243e65897511304cabf5aaf161636b6bbca177b4e84ae8d3b09694f6aadc36d4fa", 0x9d, 0x1ca1}, {&(0x7f0000000680)="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", 0xfd, 0x79d}, {&(0x7f0000000780)="05555a265d60a9420d93118072fdd83d7e90e29b4a2f74d18faa65585af934c262d7c24aab02f1c350b60a25f011fb84d043eebc977f7cef032e74bf224bae8c1413b1e261e867", 0x47, 0x1a00}, {&(0x7f0000000800)="f81c94a685edd3e7347833b456cfb5b9ab8ba4c91d2e7250fe4ad117b4f2250fd9de09bfc6a98a08238ec7a5359692ab3c8805c41f6d3ed392a40780663ddd3fd775474b5a5dd425d0f994a2f2c93ae2616159bb78159c74ffd82ab222c1ac6a5c68f0a3c9ce4cf4645c859110572d23274916e58d9ecbe926b358e9930e9c9e650bf1e980652e202dbe96b9b6ac67aaf14384b8a9d5d97b4a9b05cc4910dadcc7fbe03f08e11cac62103b0b22dd68ea55192e19785b453b49499f90a2bbc51657028de3cc258b359e0e0d78cc5db4a1ba3d31f278e08933a7ef7d995fbe3874080ff6a0ade224b42275e29188b06d1b2bc26d2e147299df6448bab6a9feca6b9167058b5965a581ca4c9046d54546612f740fdd6bd12bf1f2402809a40bc3d7cb5c440a4955da888a2cc6343e9106b154036a7f411c5310bf016e091ff8fc90b8cc26eb09a51a399fe7875f8381bd229db9f8bc3e9e952ab6571520f5dbb0868f390bcfa904f66e87adee5568e6ed0328279122e75fa40d09f120f3fe15fff84930af0d4d84d8e0e612eb7185b854b0950a61cb7ce5df8db0c92747e40246bb6e787e103e781935c22fa128339df299ef1515fe93a4b7952239abd2d6877ea89637f8633bc76c78f7730a7da2ab83d1cb3ffeea8e243806b5fbadd2ba4538ea74d9fdf62d802bd5566e5ae971def7818f2469fbb39d11d7390987855052ef80f4a3114af3a10e4a4f63e4c2feae532492efc7aece66f8b6013d49688353d628fd7aa383aefb7c904a4d3a5dcc07e28622765f35ce990be5ae7a3dc2b90fd4f56eeb83e66e444bc7d0e24d1c95340cad731ab48dd5da8fce4850f149575b30b63e32607eaa1185c9a3ea0b6bf0ab945b11330329fd1b54f5b958c5a3488df6c6e131e658cc7268c79cd097568991c03b814ef4ce7a8b576b85ee9252ae62f72b26dd55bc28500aaf86446b1a111ee4a71dc833f626dbed180eece1c3eadf084f02dfb8deccdf981cf1a7cabc2a04aba5f1ac1c850206b1932b505d9e8c3f49e9dcbc287e50bc4565c54bb4647e22f02a2ef991a6cb07fb76715b3aa3f94bbbbe7c6f6371dccf4a73e87515aa62b93c449923bd8aa538dc5793eef3867dc3c5ab261fd393d4599c96c40fb516c638f590652f6c1c63372f237fc7e69a1c047beb9518170c17f24e2e5a900bc672262a00b7db1997590824b0108a98f61a5fa09e1478a50df27a5b5a1bd996c78e9dbd5f2b4d0fcc50d603780accf4af76b38360b8553e4c7fd8a4de21808d03354f3e4aca4bb127751f8227c90ad9b74e85217807a73afe7495c5f6530c4d16d36c8595e51f9a945bbd7ac1079b6561f5c1a474e12997dcfa1c4a74c6fc424aaad7e230769302a03e71eda10e129ac9d129fdf5d6a1ba6909dbe798a517c1e256e0f0dff43e87a4642f4af52eec939866c5de5fa2ac0ad01fe43cbda513846e41ece4aad3926ef61694646cac9348ec32e161d37b9187f95212b1d4cb9d6c9632019590ea250961b80c60519172e2705cff226a6a63269a9c8f0d8592dab0577813850a0fff14caaa29ca8738e1165c1861a61fa4c9250c3967537313f54d97a56e83328ddc267374eb315d976542191a65c5bbd9cfd1bec7cc664ec54429c0b75939a5d6178a0ce68bbd53585f4247130a44ad364d32206cc0e7530a17266fec5b329492bb3510d803630e474556a5720323c3c7459d45a5e0871dab1206560c8a1db5a8e45295f84f1103cd8ba08bd7a19ec4625decce13a6398972a568235a91657f43cb6f35f560476d8638696f454e0b16bc49fbb0f56edfd03a9a07a5b74b6dfb27d5a330ab0dfd4aaa87d76e4e493be6898c703ad6aeb05613774f72f0dd875380981789ff03a5dd24293bf8d67bea724c13a35a1efd72259d46d660924c295063fb0af1a198067fe0cd7eaaa333d1027a7370f09af49cb2fc4d8c791655a640436154cb4516bfe661077bca5a6a19aa51606ffacd1182f56d4c7b095110f52bea46eb35f5f7f0e616acde45c53244cfbeee24a2ff34b917e36425b46d3d0afc8850e58b299070f8dda20d41ce8cf9470c38c9288b335d7ee7dd0ce4422f634e11d611ed1ba95891e99fc27d0990ead50be730d26d9c2d33835b8fd5da16ec6910138461ed95ce03934c5db7a97c0a6c267ec9e4caba579a7ad44e3ddccae4f03556de566e6f2fe66ba0fbfc665bc04e24beb19e4cf581c347edd18246317ab27a8c2daeacc350be68ae41209ceed35df43a012065e79b4bf4e50b92d8c75bdeb0d4b8078968f3a01231df3d2671abcbfd6dcc2ad6de56ab93653bbf9787dea594e8698784ff6049464439be5a772822d2ca5ba6ddf7ea8b84ce9eaecbf0fa04cf5bc228072d6313684fbdd808747a5f8e10e188c4037c82c0c70457594a3d54ced2b9cecbcabbf1f9fac13d16145daec5ad5d1ef37c0484ed2b3ab3af52bf872433ac3d13bc91f5e329f7274908eb3d1de295d9ba81f71ed5136079d64336c1ed96f4165d2bef8692c5a2a2df1ec322b64234f122d5e8d81ababb4912dc119d285b8ea1e82ec89ee0d079c141ff8eab36d39b8337f58ddbf972f60787841168337753a9ed5ef94f4ee778a823e5f5dc0f675a4055e54cc364d1d29cb2026d1628646ff780ac5422835e5551e1e3dd1728ac84ad7669382d3a19d69689936cd3a1a19d7837d32901336ad38909d26e683205234036345674c195b72a9ce1cba9bae9545aaa82d40eb4bfc6752ab662471873b5e0257952005a3fb0502432c5de5b99028220cb825d503e71a78b2a4db7c73fc353c2687db83e8573d793bc54a0101979a334b362658b69f6951ec9fd10e7942e7a4e95b2fe425f3348383f33d68408178ad0aa670dcab45925ac1b12f4af1138f34b1643d3ebb77a0fe0ea1a4c739cce5d8192cdc67b28fb8ad60c231dd6f18319d546acb07becb5bcf1a54d9f8248c1b72d9087777bbcef0097725a1c506349c1461b917caaddbd52bf0f4e06f094c848d623e8e00fc1887b18bd6e9494f2493ab2d847cef7d29c311bc5d4136e0602f31da64fa4ce36163df249e29092523fea6db99670ee04ec1aba8484e9f45fb3cf0387f3bf2303b654196f3fc0e3bc09b94246cec9f3bf529e3c8594131cd17b3f49181a65323a7cd6c1d0fec24b28c3d960767715c28cfe082f69d0e1a031c6475323b2c3fd7844ce4fbcdf276b6bc0569a1f3ee6332a17c18518cecc6ca9bc35a7b2a91a4eff373cbdb29fc2e76590dc8e4d2d27d4ce0bb270e96fe1c768e004be06073ccdacf590243d99e0fad0bbc2d98517bbf2b5dbabdd95934851822f97d5673b90da7214ffc4dce26a8217217b3824ae5d8bdb35c643cd3347b2447aa6ec36a224424d809d71833205482485ea1dbffb039bcb0b9a57295a97ef229331687b76279e7093de30aa710be60a8a39e8ab824917c43d9dc204b21508e6fc2d486708e55867ad10ffb06094514ea008b5504a5790f59f69568686672453b48a669768512849103482199dbcbfa07ff1a88146557e09d1066a2da39f63e9a0faad8977aa80961507db9dd102e6c471fd7ca9987458b5a3e0af1a659910c0c66ad96f2df2a6fa9f4178e860e73f228ae1affab20459ff4f5c6e8290fb5be9e7b1a811aa7e66467696ddbda136218abca26d3bbf46c24184894d78dea9fa7373ef753beba224e84afa75daa67bdc80fc7e2d87657df00dbb4c3ef8b266739aa2f2269f327911e401e2e156c2e359eb38c5bd2f0a8edcbc5d60878ccfa5a11781067deb86762b9755e1a77b473088733c6978152bf214532d85837e49f353a7c1b7ca7023fd0507c5d50f1c21027951a74349dae3b3c315ba6c1f4db651281996762c9e3159191870b726c51b1a5a6d8d6663ad665f24c57a2cfa572d0cc3c2939c98f826148b9446c3504cbe35f2a3d30eb344fa66ae6cb0d08b6087c5629a9475847068bb770f0abd4fefda49551a7a09b1a73821b2f999dbc70cfb7cb8bb61d3fac95fe43ed6d6112d6c45dc231fc348281f276d0a644fa500ad9f4168e7d20fc620febdbf060fd3452ca04915bbc90e0eb4221fcd3caad01343a6132598b5a430d6a2b47d284979ffdebb99cc0476314054c706481c9772cc51388a4c39f0f6ccc56cd83ad24d819d206dc9765cda5b8c94a6782c074232763ac399b3b80b11d0b3a506652853f16166e9cb0b7523fadb78cdaed83bcd08a34263d447f3f89479ebfe260143b32bf05252ff76ad04b43627a1cc2524b3c8e1815c0b3ded9ff5e1dad404d0b8a3aad66b6214164dfc7c481a413dd9c93208c80261c71beed01b75bc2953cd5b7caf81ecf4d81402a349c5cec8f9b016786144d557ff9c09a5e0a019f9616ac32d1cf564c9bb1d37ac0a55411edeee0fdc403fd00ca9c5c31970d2a0c9a703206c2a43d1b08605d9e44fb95e94577263e7bfeeabc6b00adc26a37d3ca6c8196c7e22b8732ae635af7a659ee3dafbb3cc85b8fb90d91783b3b51e42ebd22d4dbeb374306d87591508dc5e328c0c2f19bf5b9bfa7cca673ce94c4f967837cb607601b80d1cb69f19af37389936319613217491ea14cd5c65ae67499a0df2de93da1daf5f6626bdbf7fb9b6c48379dae35ea33ab8bff7f417f8b4829fbc9ecd637a065a4328b2e57e7a57170a0dcce858fd3d2629205fb5bbd804c6ed6b1746449e9e4125e905db19c33119f55970ec6887c89cfd373e1df2ab79cfe8f628e11221cd9e265ff0b16d2970088d06791e26e4f0277322708c7db1d445027b56a97334d32c8dfd06fe4c98d2cdb4cd067714b3f0f88bca971221994e69bf22190b667c2036aec8f41bcb84e5d74ab65d59c1b347452fb4f0e3a19782742efec819d289deb225416cfd3647fcdd3d6a58dc929c63b321d0afef41e718a27e3049cc352892a1c89ac6df2206f75b04b89704070b4715fbb430db37cf54670f3ceaaebe5d9a7370a5ae9960dcdfa89d62143afb2a4ce90098f072f6b076867c315bb4ac31df415b25896d51f15341174535cad5a6ad7c9507c1659e8a8b27cbb0133110abef9f8d12ec6b2aded3e03fba1af08112a7428489bd4cce1258ab05f37f71301cb3b8ee4f37b5caf75fb0f78ac34d06c5eaae20836a2e9f0d1f52e2620b49d6c98fc693d63687da7a2e1c5f43b92f72a53d9b2fefc522ed1db4478add20d4d2916372e57fa3ab15c5e31437871bca21dfdd650c05c89025706485f14417c81defcf3da9f86f0d1a4ea2d7b64dddb628afca1d8331ea32c150b7cf7d07115bfcfec6a685d156b4c92636d1011288bb2f1ce7804c8e4ad0bc48a97597ab81b171862dff88269b658ab234f24bea389e7b431596034abd324d16fb2293708f61f9af9f7c5788f1057bd30ea8128860757308ccd9bd258cc5579d41eab94e109640d75ebb994ba6da15d5c2255efc462753853dd9b45a6e511992286dee3299aecb9ec207a9aa467dcc88c81d2f7fce62cfd3566b77e6444ead7f79fe6c955827c80c202dd7d269e9a8f6242a5faf4a644714f0b8e7f28bf260df401b88778afece11e6628434cadee61f37aaa0faca895b9a2e60aa239c96568f94cb0a60682eecef7e04c4fdb635ba9679f28c6a623ead0d1742601a85edbfee93a4530cf650ebfcdc571b893037cb931e6c9c847e260fedf651711ce4784e188ff5f41b1eef385053964941aa1654a120f42bf5044365b9cb5cb378093cfd0d2762f113030a2759f53bd77047f37949f3398ceb4c21fd5d63c04c067732ed93768cd95b54969e06a994748405af", 0x1000, 0x8}], 0x8000, &(0x7f00000018c0)={[{'&@H\x84-'}, {}, {']'}, {'.{-'}, {'/dev/full\x00'}, {'.'}, {'\x00'}, {'/dev/full\x00'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@audit}, {@euid_eq={'euid', 0x3d, 0xee01}}]})
tee(r3, r6, 0x7ff, 0x0)
syz_io_uring_setup(0x2b33, &(0x7f0000000240)={0x0, 0xd750, 0x1, 0x0, 0x112}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340), &(0x7f0000000380))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:19 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xb0ff2000000000, 0x0, 0x0)

13:54:35 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&,'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:54:35 executing program 7:
r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)=ANY=[@ANYBLOB="010000040000000018000000", @ANYRES32=<r6=>r0, @ANYBLOB="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"])
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x110, r6, 0x8000000)

13:54:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xd04c72277f0000, 0x0, 0x0)

13:54:35 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r5, 0x0)

13:54:35 executing program 3:
fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='trusted.overlay.origin\x00', &(0x7f0000000240)='\x00', 0x1, 0x3)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1, 0x3, 0x0, 0x9, 0x0, 0x5b67, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x14, 0x9, 0x1, 0x3, 0x2, 0x2, 0x4, 0x0, 0x7fc6941, 0x0, 0x2}, 0x0, 0x8, r0, 0x1)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:35 executing program 1:
r0 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
inotify_rm_watch(r4, r0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0)
close(r5)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:35 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '\x05#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:35 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}, 0x22}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xd04c73277f0000, 0x0, 0x0)

13:54:35 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup2(r5, r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000000)=0x8001, 0x4)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:35 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3bc4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x201}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
creat(&(0x7f0000000080)='./file1\x00', 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x60081, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x180810, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r6 = dup2(r3, r4)
renameat(r3, &(0x7f0000000140)='./file1\x00', r6, &(0x7f0000000180)='./file1\x00')
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:35 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1f, 0xfe, 0xa0, 0x0, 0x2, 0x2002, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x6, 0x800}, 0x10, 0x80, 0x2, 0x0, 0x8, 0x7, 0x8, 0x0, 0x8, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
dup3(r0, r1, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_tables_matches\x00')
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000)
syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
dup3(r3, r6, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r0, @ANYBLOB="00000000000000e22d2f66696c653000"])
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000005, 0x810, r8, 0x0)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
fcntl$setownex(r9, 0xf, &(0x7f0000000200)={0x0, 0xffffffffffffffff})

13:54:35 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000001a00)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f0000001940)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000200)=""/98, 0x62}], 0x2, &(0x7f0000000300)=""/172, 0xac}, 0x277}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/37, 0x25}], 0x2}, 0x3}, {{&(0x7f00000004c0), 0x80, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/42, 0x2a}, {&(0x7f0000001780)=""/38, 0x26}], 0x6, &(0x7f0000001840)=""/211, 0xd3}, 0x8}], 0x3, 0x20, &(0x7f0000001a40)={r4, r5+60000000})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x100010, r0, 0x8000000)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
syz_io_uring_submit(r7, r2, &(0x7f0000001ac0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf706fa0255e87342}, 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f0000001c40), 0x3, 0x40)
syz_io_uring_submit(0x0, r2, &(0x7f0000001cc0)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x6, &(0x7f0000001c80)=[0xffffffffffffffff, r9], 0x2}, 0x81)
ftruncate(r8, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r8, 0x0)
r10 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000001bc0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x81, 0x3, &(0x7f0000001b00)="45eadbf11215dd00eff3dbb61e68ebbbd89a56f5fd9dfb1f3ac92290920052a7c9faebe313c2d30158458945da570527dd15f24311f9f17b52975143fd505143fe70f47418f0e51f96cd914a4f95eaf776e92b6dbcfa788a1d6be9aef26b5338ee51254dfca23555bd9b32f02a04396494ac241dddb4d1089da76d77e348441b1a6307943fa06dbeefe891b227affc121b725d840c5e7dd31776392f6cc9078f3d1f7605e2c7fb8f6a06f44254f3e3a6d6a08a", 0x7ff, 0x0, 0x0, {0x3}}, 0x9)
syz_io_uring_submit(r1, r11, &(0x7f0000001a80)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6, 0x0, @fd_index=0x4, 0x8, 0x0, 0x20, 0x0, 0x1}, 0x1a7a8329)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r10, 0x8000000)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:35 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xd06c72277f0000, 0x0, 0x0)

13:54:35 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r6, 0x4)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x4010, r5, 0x10000000)
syz_io_uring_submit(r7, r9, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, &(0x7f0000000340)="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", 0x1000}, 0x3)

13:54:35 executing program 7:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x10000000)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}, 0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x0, @fd, 0x2, 0x2affd495, 0x8, 0xb, 0x0, {0x0, r5}}, 0x5)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0)
r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000)
syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/i915', 0x109082, 0x40)
io_uring_enter(r5, 0x7f1f, 0xb25d, 0x2, &(0x7f0000000080)={[0x9]}, 0x8)

13:54:52 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r5, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x1}, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x30, r0, 0x8000000)
r9 = dup(r5)
syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0xfff, &(0x7f0000000040)=[r3, r3, r3], 0x3, 0x0, 0x0, {0x0, r10}}, 0x1000)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0xfffffffc, 0x4, 0xfffffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xd06c73277f0000, 0x0, 0x0)

13:54:52 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt, 0x22}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:52 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}, 0x22}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:54:52 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '\"#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:54:52 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r4, &(0x7f00000007c0)=""/180, 0xb4)
io_uring_enter(r4, 0x3a2f, 0x4277, 0x1, &(0x7f00000000c0)={[0x1f]}, 0x8)
close(r3)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x260, 0x3d1f, 0xaf9d2417b8c4dd72, &(0x7f0000000080)={[0x3]}, 0x8)

13:54:52 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_enter(r0, 0x5bb3, 0x914d, 0x2, &(0x7f0000000040)={[0x4]}, 0x8)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r4=>r0, @ANYRES32=<r5=>r0, @ANYBLOB="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"])
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000200)=r4, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x400a031, r0, 0x8000000)
io_uring_enter(r5, 0xc8, 0xd799, 0x0, &(0x7f0000000240)={[0xc891]}, 0x8)
syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x3113, 0x4bf9, 0x5, &(0x7f00000000c0)={[0xfffffffffffff473]}, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
read(r5, &(0x7f0000000040)=""/139, 0x8b)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xf0ff1f00000000, 0x0, 0x0)

13:54:52 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/backlight', 0x121400, 0xe0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r4)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8100}, 0x4)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000080)=0x6, 0x4)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 4:
r0 = syz_io_uring_setup(0x393e, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r5, &(0x7f0000000300)=""/187, 0xbb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x1010, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0xf0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x400}, {0xfffffffffffffffe}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000240), 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, 0xe8)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0xad)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x81)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:54:52 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0)

13:55:09 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000f, 0x810, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$CDROM_DEBUG(r6, 0x5330, 0x0)
readv(r5, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000040)=0xff, 0x4)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffd}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x2cbd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6004, @fd=r0, 0xf02, 0x2315, 0x0, 0x10, 0x1, {0x2}}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash, 0x22}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:55:09 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt, 0x22}, {@hash}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:55:09 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, ',#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:55:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

13:55:09 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0xfffe0000)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffff600000, 0x0, 0x0)

13:55:09 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fork()
ptrace(0x10, r4)
ptrace$setsig(0x15, r4, 0x10000, &(0x7f00000001c0)={0x8, 0x0, 0x1})
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents64(r5, &(0x7f00000007c0)=""/180, 0xb4)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x7f, 0x1, 0xfb, 0x0, 0xe47, 0x281, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x43, 0x0, @perf_config_ext={0x800}, 0x8006, 0x3, 0x3ff, 0x7, 0x1, 0x0, 0x775, 0x0, 0x0, 0x0, 0x6}, r4, 0x2, r5, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 4:
r0 = syz_io_uring_setup(0x6211, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

13:55:09 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
chmod(&(0x7f0000000080)='./file1\x00', 0x9)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
close(r3)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xffff7fff, 0x2, &(0x7f0000001300)="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", 0x3ff, 0x0, 0x1, {0x2, r5}}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 1:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0)
stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0xffffffffffffffff, r5, 0x0)
r6 = getegid()
setresgid(0x0, 0xee00, r6)
setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x1, r4}, {0x2, 0x4, r5}], {0x4, 0x1}, [{0x8, 0x1, r6}, {0x8, 0x5}, {0x8, 0x2, 0xee00}], {0x10, 0x4}, {0x20, 0x3}}, 0x4c, 0x1)
close(r3)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:09 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47, 0x100, 0x0, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60ff)

13:55:25 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4237, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 7:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4)
syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000003)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
inotify_add_watch(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x3ba}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x16e4, 0x2, &(0x7f0000000340)="7f7fc4ed974f270d42e5f7c113ce5b4e9ee00019f7a4e95c81063830ad118f788dec8ee62eccfa5d1e6ae682bc59925f3859630c1150d9af664d5e5ab0f20421f0ec2f5c8746a170f76f6828be2eb0011d475b4adbfec9f0f276686348b2adb4ea1753a4fe81a8426f459b0d8f34e64694050d5f66075cf36b40d3d2f949f1af8b7b399832bc503648eae30932cd5c1efa9dc5b439d9e00e1617bd4be15f6d591cb7b15945e37530f042753a9ae37129a4fffcd23b650ebc22e79e2cb0452437409a127948eaca61", 0x5, 0x0, 0x1, {0x2}}, 0x0)
close(r4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 6:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x3d, '%\"'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:55:25 executing program 2:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash}, {@obj_user={'obj_user', 0x22, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}, {@uid_gt}]}})

13:55:25 executing program 0:
clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '+.'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&+'}}, {@fowner_gt}, {@hash, 0x22}, {@obj_user={'obj_user', 0x3d, '%#'}}, {@subj_type={'subj_type', 0x3d, ')^@:!'}}]}})

13:55:25 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x7b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004000)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r1, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
recvmmsg(r6, &(0x7f0000000840)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000300)=""/205, 0xcd}], 0x3, &(0x7f0000000400)=""/148, 0x94}, 0x8}, {{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/122, 0x7a}, {&(0x7f0000000680)=""/155, 0x9b}], 0x3, &(0x7f0000000780)=""/144, 0x90}, 0x8001}], 0x2, 0x10100, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

13:55:25 executing program 4:
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3868, &(0x7f0000000040)={0x0, 0x6a97, 0x1, 0x3, 0x1ff, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200))

13:55:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)}, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 7:
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

13:55:25 executing program 5:
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40040d5}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xb0ff20)

[ 3302.053628] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3302.054796] CPU: 1 PID: 4053 Comm: syz-fuzzer Not tainted 5.10.226 #1
[ 3302.055342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3302.056048] Call Trace:
[ 3302.056287]  dump_stack+0x107/0x167
[ 3302.056612]  dump_header+0x106/0x655
[ 3302.056933]  oom_kill_process.cold+0x10/0x15
[ 3302.057317]  out_of_memory+0x1149/0x1440
[ 3302.057693]  ? oom_killer_disable+0x280/0x280
[ 3302.058078]  ? mutex_trylock+0x237/0x2b0
[ 3302.058427]  ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170
[ 3302.058938]  __alloc_pages_slowpath.constprop.0+0x1b63/0x2170
[ 3302.059442]  ? lock_acquire+0xf7/0x470
[ 3302.059790]  ? warn_alloc+0x190/0x190
[ 3302.060131]  __alloc_pages_nodemask+0x51d/0x600
[ 3302.060526]  ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170
[ 3302.061044]  ? find_get_entry+0x2c8/0x740
[ 3302.061411]  alloc_pages_current+0x187/0x280
[ 3302.061788]  __page_cache_alloc+0x2d2/0x360
[ 3302.062174]  pagecache_get_page+0x2c7/0xc80
[ 3302.062544]  filemap_fault+0x177d/0x2210
[ 3302.062906]  ? read_cache_page_gfp+0x30/0x30
[ 3302.063283]  ? replace_page_cache_page+0x1200/0x1200
[ 3302.063710]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3302.064171]  ext4_filemap_fault+0x87/0xc0
[ 3302.064523]  __do_fault+0x113/0x410
[ 3302.064835]  handle_mm_fault+0x1e53/0x3500
[ 3302.065212]  ? trace_hardirqs_on+0x5b/0x180
[ 3302.065589]  ? find_held_lock+0x2c/0x110
[ 3302.065935]  ? __pmd_alloc+0x5e0/0x5e0
[ 3302.066285]  ? vmacache_find+0x55/0x2a0
[ 3302.066633]  do_user_addr_fault+0x56e/0xc60
[ 3302.067005]  exc_page_fault+0xa2/0x1a0
[ 3302.067351]  ? asm_exc_page_fault+0x8/0x30
[ 3302.067708]  asm_exc_page_fault+0x1e/0x30
[ 3302.068055] RIP: 0033:0x454f8a
[ 3302.068347] Code: Unable to access opcode bytes at RIP 0x454f60.
[ 3302.068853] RSP: 002b:000000c0004b1d70 EFLAGS: 00010202
[ 3302.069315] RAX: 0000000000000000 RBX: 000000c000056648 RCX: 0000000000000000
[ 3302.069925] RDX: 0000000000b12b70 RSI: 0000030151610876 RDI: 000000c007ae2400
[ 3302.070533] RBP: 000000c0004b1db8 R08: 0000000000000000 R09: 0000000000000001
[ 3302.071131] R10: 00007fff089c5090 R11: 000000000054ce00 R12: 0000000000000003
[ 3302.071742] R13: 000000c0003df380 R14: 000003088fc8083b R15: ffffffffffffffff
[ 3302.072395] Mem-Info:
[ 3302.072633] active_anon:5609 inactive_anon:69034 isolated_anon:0
[ 3302.072633]  active_file:17 inactive_file:15 isolated_file:0
[ 3302.072633]  unevictable:0 dirty:0 writeback:0
[ 3302.072633]  slab_reclaimable:9493 slab_unreclaimable:201417
[ 3302.072633]  mapped:69626 shmem:124 pagetables:7237 bounce:0
[ 3302.072633]  free:3030 free_pcp:1 free_cma:0
[ 3302.075254] Node 0 active_anon:22436kB inactive_anon:276136kB active_file:68kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278504kB dirty:0kB writeback:0kB shmem:496kB writeback_tmp:0kB kernel_stack:10144kB all_unreclaimable? no
[ 3302.077187] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3302.079380] lowmem_reserve[]: 0 1616 1616 1616
[ 3302.079789] Node 0 DMA32 free:5628kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:22436kB inactive_anon:276136kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:2080640kB managed:1660468kB mlocked:0kB pagetables:28948kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 3302.082190] lowmem_reserve[]: 0 0 0 0
[ 3302.082564] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB
[ 3302.083846] Node 0 DMA32: 1291*4kB (UME) 22*8kB (UM) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5340kB
[ 3302.084967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3302.085703] 144 total pagecache pages
[ 3302.086021] 0 pages in swap cache
[ 3302.086341] Swap cache stats: add 0, delete 0, find 0/0
[ 3302.086781] Free swap  = 0kB
[ 3302.087034] Total swap = 0kB
[ 3302.087297] 524158 pages RAM
[ 3302.087571] 0 pages HighMem/MovableOnly
[ 3302.087901] 105064 pages reserved
[ 3302.088243] Unreclaimable slab info:
[ 3302.088832] Name                      Used          Total
[ 3302.089373] pid_3                     52KB         52KB
[ 3302.089850] pid_2                    394KB        536KB
[ 3302.090296] IEEE-802.15.4-MAC         63KB         63KB
[ 3302.090778] IEEE-802.15.4-RAW         63KB         63KB
[ 3302.091223] p9_req_t                   8KB          8KB
[ 3302.091703] ip6-frags                 15KB         15KB
[ 3302.092148] fib6_nodes                28KB         28KB
[ 3302.092631] ip6_dst_cache             37KB         37KB
[ 3302.093075] PINGv6                    63KB         63KB
[ 3302.093572] RAWv6                    409KB        409KB
[ 3302.094019] UDPLITEv6                 62KB         62KB
[ 3302.094485] UDPv6                     62KB         62KB
[ 3302.094938] tw_sock_TCPv6             15KB         15KB
[ 3302.095408] request_sock_TCPv6         15KB         15KB
[ 3302.095868] TCPv6                    156KB        156KB
[ 3302.096331] nf_conntrack               7KB          7KB
[ 3302.096787] scsi_sense_cache           8KB          8KB
[ 3302.097231] sd_ext_cdb                 3KB          3KB
[ 3302.097710] virtio_scsi_cmd           16KB         16KB
[ 3302.098176] sgpool-128                59KB         59KB
[ 3302.098642] sgpool-64                 63KB         63KB
[ 3302.099096] sgpool-32                173KB        204KB
[ 3302.099561] sgpool-16                 82KB         82KB
[ 3302.100015] sgpool-8                  41KB         41KB
[ 3302.100486] io_kiocb                1035KB       1098KB
[ 3302.100930] mqueue_inode_cache         62KB         62KB
[ 3302.101421] nfs_commit_data           15KB         15KB
[ 3302.101870] nfs_write_data            47KB         47KB
[ 3302.102348] jbd2_inode                11KB         11KB
[ 3302.102793] ext4_system_zone           7KB          7KB
[ 3302.103251] ext4_io_end_vec            7KB          7KB
[ 3302.103717] ext4_bio_post_read_ctx         15KB         15KB
[ 3302.104207] kioctx                    31KB         31KB
[ 3302.104671] aio_kiocb                  7KB          7KB
[ 3302.105119] bio-2                      4KB          4KB
[ 3302.105607] fasync_cache               7KB          7KB
[ 3302.106053] pid_namespace             35KB         35KB
[ 3302.106535] posix_timers_cache         15KB         15KB
[ 3302.106986] rpc_buffers               31KB         31KB
[ 3302.107461] rpc_tasks                  3KB          3KB
[ 3302.107905] UNIX                     384KB        384KB
[ 3302.108377] ip4-frags                 15KB         15KB
[ 3302.108823] UDP-Lite                  63KB         63KB
[ 3302.109270] tcp_bind_bucket            8KB          8KB
[ 3302.109759] inet_peer_cache            8KB          8KB
[ 3302.110205] xfrm_state                32KB         32KB
[ 3302.110683] ip_fib_trie                8KB          8KB
[ 3302.111126] ip_fib_alias              19KB         19KB
[ 3302.111610] ip_dst_cache              87KB        120KB
[ 3302.112053] PING                      62KB         62KB
[ 3302.112516] RAW                      125KB        125KB
[ 3302.112970] UDP                      294KB        346KB
[ 3302.113448] tw_sock_TCP               15KB         15KB
[ 3302.113905] request_sock_TCP           7KB          7KB
[ 3302.114367] TCP                       90KB         90KB
[ 3302.114822] hugetlbfs_inode_cache         30KB         30KB
[ 3302.115298] bio-1                     11KB         11KB
[ 3302.115774] eventpoll_pwq             27KB         27KB
[ 3302.116216] eventpoll_epi             43KB         43KB
[ 3302.116680] inotify_inode_mark         35KB         35KB
[ 3302.117141] request_queue             60KB         60KB
[ 3302.117620] blkdev_ioc                15KB         15KB
[ 3302.118075] bio-0                     88KB         88KB
[ 3302.118541] biovec-max               442KB        505KB
[ 3302.118996] biovec-64                141KB        173KB
[ 3302.119466] biovec-16                 71KB         71KB
[ 3302.119909] user_namespace            95KB         95KB
[ 3302.120382] uid_cache                  8KB          8KB
[ 3302.120825] dmaengine-unmap-2          4KB          4KB
[ 3302.121278] audit_buffer               7KB          7KB
[ 3302.121756] skbuff_fclone_cache         52KB         75KB
[ 3302.122259] skbuff_head_cache        810KB       1207KB
[ 3302.122724] configfs_dir_cache          4KB          4KB
[ 3302.123185] file_lock_cache           55KB         55KB
[ 3302.123649] file_lock_ctx              7KB          7KB
[ 3302.124092] fsnotify_mark_connector         20KB         20KB
[ 3302.124609] net_namespace            201KB        201KB
[ 3302.125059] task_delay_info          277KB        370KB
[ 3302.125546] taskstats                115KB        115KB
[ 3302.125992] proc_dir_entry           562KB        581KB
[ 3302.126468] pde_opener                43KB         43KB
[ 3302.126913] seq_file                  60KB         63KB
[ 3302.127390] sigqueue                 133KB        133KB
[ 3302.127835] shmem_inode_cache       1252KB       1383KB
[ 3302.128279] kernfs_iattrs_cache        235KB        235KB
[ 3302.128771] kernfs_node_cache       6160KB       6197KB
[ 3302.129214] mnt_cache                252KB        252KB
[ 3302.129732] filp                    1016KB       1762KB
[ 3302.130199] names_cache             3459KB       5503KB
[ 3302.130677] hashtab_node             274KB        274KB
[ 3302.131121] ebitmap_node            1149KB       1149KB
[ 3302.131599] avtab_node              4976KB       4976KB
[ 3302.132047] avc_node                  35KB         35KB
[ 3302.132526] lsm_inode_cache         3258KB       3356KB
[ 3302.132984] lsm_file_cache           158KB        220KB
[ 3302.133458] key_jar                   39KB         39KB
[ 3302.133914] uts_namespace             15KB         15KB
[ 3302.134377] nsproxy                   15KB         15KB
[ 3302.134866] vm_area_struct          2773KB       3076KB
[ 3302.135338] fs_cache                 100KB        100KB
[ 3302.135792] files_cache              350KB        350KB
[ 3302.136236] signal_cache             653KB        710KB
[ 3302.136702] sighand_cache            744KB        781KB
[ 3302.137178] task_struct             8130KB       9660KB
[ 3302.137667] cred_jar                 134KB        216KB
[ 3302.138130] anon_vma_chain           793KB        850KB
[ 3302.138596] anon_vma                 991KB        992KB
[ 3302.139053] pid                       52KB         71KB
[ 3302.139521] Acpi-Operand             203KB        233KB
[ 3302.139975] Acpi-ParseExt             31KB         31KB
[ 3302.140441] Acpi-Parse               126KB        142KB
[ 3302.140886] Acpi-State               252KB        267KB
[ 3302.141359] Acpi-Namespace            24KB         24KB
[ 3302.141817] numa_policy                7KB          7KB
[ 3302.142572] trace_event_file         176KB        176KB
[ 3302.143020] ftrace_event_field        280KB        280KB
[ 3302.143507] pool_workqueue            40KB         40KB
[ 3302.143951] task_group                16KB         16KB
[ 3302.144429] mm_struct                558KB        661KB
[ 3302.144876] vmap_area                 76KB        114KB
[ 3302.145360] page->ptl                751KB        819KB
[ 3302.145821] kmemleak_scan_area         39KB         79KB
[ 3302.146270] kmemleak_object       593421KB     593421KB
[ 3302.146762] kmalloc-8k              5360KB       5504KB
[ 3302.147223] kmalloc-4k              8000KB       9376KB
[ 3302.147708] kmalloc-2k              6772KB       7168KB
[ 3302.148171] kmalloc-1k              2868KB       4256KB
[ 3302.148655] kmalloc-512            21566KB      21920KB
[ 3302.149107] kmalloc-256             1463KB       1544KB
[ 3302.149598] kmalloc-192              688KB        700KB
[ 3302.150063] kmalloc-128              733KB        820KB
[ 3302.150557] kmalloc-96               653KB        840KB
[ 3302.151029] kmalloc-64              1177KB       1492KB
[ 3302.151494] kmalloc-32             63960KB      63960KB
[ 3302.151949] kmalloc-16               372KB        388KB
[ 3302.152417] kmalloc-8                326KB        354KB
[ 3302.152872] kmem_cache_node           47KB         47KB
[ 3302.153334] kmem_cache                75KB         75KB
[ 3302.153800] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=4053,uid=0
[ 3302.156307] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1242496kB, anon-rss:243744kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:952kB oom_score_adj:0
[ 3304.243164] oom_reaper: reaped process 53185 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB

VM DIAGNOSIS:
13:55:42  Registers:
info registers vcpu 0
RAX=1ffffffff0d0d570 RBX=ffffffff8686ab40 RCX=1ffffffff0d3dbc9 RDX=ffff888015cc8929
RSI=ffff888015cc8928 RDI=ffffffff8686ab80 RBP=dffffc0000000000 RSP=ffff88800f057c10
R8 =0000000000000001 R9 =0000000000000003 R10=ffffed1001e0af8f R11=0000000000000001
R12=ffff888015cc8928 R13=0000000000000001 R14=ffffffff86861300 R15=ffffffff86864698
RIP=ffffffff8126319a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe7200000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a5b3861020 CR3=000000000d4ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=000000000ddd062a
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=00000000000000000000000074756873
XMM02=000055a5c6125ae0000055a5c60cbaf0 XMM03=00000000000000000000000000000000
XMM04=00ff0303020201000000000000000000 XMM05=000055a5c613c1a0000055a5c6125ae0
XMM06=000055a5c61609c0000055a5c61c3a90 XMM07=00000000000000000000000000000000
XMM08=636f72702f0064696e6f697373657300 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000018 RCX=ffffffff8156cde3 RDX=0000000000000018
RSI=ffff88801a38cec0 RDI=0000000000000005 RBP=0000000000000024 RSP=ffff888037ddf8e0
R8 =0000000000000000 R9 =ffffea00011b6077 R10=0000000000000000 R11=0000000000000001
R12=ffffea00011b6074 R13=dffffc0000000000 R14=ffff88804d292138 R15=ffffea00011b6040
RIP=ffffffff81409f40 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe1500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb26e8b0140 CR3=000000001cc24000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=30306234386136303638616663356134
XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572
XMM04=d9371fb62948ddd10000000000d7ef88 XMM05=d3fdd5f48436fbd700000000000aeab0
XMM06=abf72f627d50fd4400000000000ae968 XMM07=00000000000000000000000000000000
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000