00100)='./file0\x00', 0x4800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2104.574360] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2104.613259] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:01:38 executing program 1: socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = socket$inet(0x2, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0xf57a6754628fd488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r1, r0, 0x0, 0x40400080000000) 00:01:38 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(&(0x7f0000000280)='./file1\x00', &(0x7f0000000480)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x8010, 0x8000039, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0xaa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5604, &(0x7f0000000040)={0x0, 0xef33, 0x0, 0x3, 0x228, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000100)=0x0) r7 = openat(r1, &(0x7f0000000000)='./file1/file0\x00', 0x141e40, 0x182) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x1100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r6, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x31713, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) dup3(0xffffffffffffffff, r7, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="6b6f7c66646e032ffe4d6f35fcd1bcb0d3923d00000100ea8962f6d23642bed45aa52eb49740f67be6d79f6c2af8e3e494b36d868474ee1cf7dfa945fa918e6f482fecb9861ad1a2d9c6f6ddaa58bd5e35e324103e551d27b64c962a985e661d37bae5a7ec272be2dce8e7a84b109e3373f8e2dcfcd3807815dd976911aedc76c935d1aecb8cdbfedf53f8d0c01cb8b20bb9fb000000fa00a6abb389cfa88741000000000000", @ANYRESHEX=r8, @ANYRES32, @ANYRESHEX=r9, @ANYRES32=r6]) 00:01:38 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:01:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:01:38 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)=@fragment={0x8, 0x0, 0xe0, 0x0, 0x0, 0x2, 0x66}, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x1800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000780)={{r0}, "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"}) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1a52a1f043cd5731, 0x0, 0x18}, 0x18) sendfile(r4, r3, 0x0, 0x4000007ffffffc) 00:01:38 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:01:38 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) socket$inet(0x2, 0x1, 0x7) 00:01:38 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2121.396191] FAULT_INJECTION: forcing a failure. [ 2121.396191] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.398630] CPU: 1 PID: 11556 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2121.400097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.401853] Call Trace: [ 2121.402418] dump_stack+0x107/0x167 [ 2121.403205] should_fail.cold+0x5/0xa [ 2121.404031] should_failslab+0x5/0x20 [ 2121.404832] kmem_cache_alloc_bulk+0x4b/0x320 [ 2121.405785] io_submit_sqes+0x6fe6/0x8610 [ 2121.406692] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.407731] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.408744] ? find_held_lock+0x2c/0x110 [ 2121.409615] ? io_submit_sqes+0x8610/0x8610 [ 2121.410532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2121.411544] ? wait_for_completion_io+0x270/0x270 [ 2121.412555] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.413536] ? vfs_write+0x354/0xb10 [ 2121.414321] ? fput_many+0x2f/0x1a0 [ 2121.415094] ? ksys_write+0x1a9/0x260 [ 2121.415891] ? __ia32_sys_read+0xb0/0xb0 [ 2121.416748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.417861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.418948] do_syscall_64+0x33/0x40 [ 2121.419732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2121.420810] RIP: 0033:0x7ff4e8a17b19 [ 2121.421596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.425469] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2121.427132] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2121.428654] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2121.430268] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.431801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2121.433316] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2121.437768] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2121.461286] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2121.471384] FAULT_INJECTION: forcing a failure. [ 2121.471384] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.474295] CPU: 1 PID: 11564 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2121.475752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.477496] Call Trace: [ 2121.478054] dump_stack+0x107/0x167 [ 2121.478848] should_fail.cold+0x5/0xa [ 2121.479675] should_failslab+0x5/0x20 [ 2121.480495] kmem_cache_alloc_bulk+0x4b/0x320 [ 2121.481484] io_submit_sqes+0x6fe6/0x8610 [ 2121.482407] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.483460] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.484484] ? find_held_lock+0x2c/0x110 [ 2121.485351] ? io_submit_sqes+0x8610/0x8610 [ 2121.486279] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2121.487310] ? wait_for_completion_io+0x270/0x270 [ 2121.488331] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.489308] ? vfs_write+0x354/0xb10 [ 2121.490101] ? fput_many+0x2f/0x1a0 [ 2121.490865] ? ksys_write+0x1a9/0x260 [ 2121.491665] ? __ia32_sys_read+0xb0/0xb0 [ 2121.492513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.493614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.494691] do_syscall_64+0x33/0x40 [ 2121.495466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2121.496534] RIP: 0033:0x7fa8c8de3b19 [ 2121.497310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.501134] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2121.502732] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2121.504220] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2121.505728] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.507216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2121.508703] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:01:38 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfdfdffff, 0x0, 0x0, 0x0, "1c5f9161effc37aa8db584ac3cb21a54e4d247c2a984329ec95ddc2ada656a046257f4f19a97779a2771c541ace10afc038439450ab01531686d6b1d2e088b3a", "8242217ff0a5d3cab8015fbb90da56c181d9fd1bc0aa745cfca7675285369ee6"}) 00:01:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01930000000100000018b800", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) finit_module(r2, &(0x7f0000000140)='\x00', 0x2) r3 = socket$inet(0x2, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r4, r0, 0x0, 0x4000007ffffffc) 00:01:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2121.640811] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:01:38 executing program 7: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) flistxattr(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10000, 0x100200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0x0, @empty, 0x2}, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb9f}, 0x0, [0x0, 0xb09c, 0x7, 0x8, 0x3ff, 0x9, 0x1, 0x2]}, 0x5c) openat(r1, &(0x7f0000000480)='./file0\x00', 0x202, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000380)={0xffffffff, {{0xa, 0x4e24, 0x2ed, @mcast2}}}, 0x88) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000440)=0x1f, 0x4) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000200)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x200, 0x4) 00:01:38 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:01:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:01:38 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2121.831850] FAULT_INJECTION: forcing a failure. [ 2121.831850] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.834095] CPU: 1 PID: 11595 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2121.835364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2121.837071] Call Trace: [ 2121.837581] dump_stack+0x107/0x167 [ 2121.838247] should_fail.cold+0x5/0xa [ 2121.838946] ? create_object.isra.0+0x3a/0xa20 [ 2121.839769] should_failslab+0x5/0x20 [ 2121.840454] kmem_cache_alloc+0x5b/0x310 [ 2121.841188] ? mark_held_locks+0x9e/0xe0 [ 2121.841952] create_object.isra.0+0x3a/0xa20 [ 2121.842772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2121.843696] kmem_cache_alloc_bulk+0x168/0x320 [ 2121.844516] io_submit_sqes+0x6fe6/0x8610 [ 2121.845299] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.846238] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2121.847125] ? find_held_lock+0x2c/0x110 [ 2121.847871] ? io_submit_sqes+0x8610/0x8610 [ 2121.848685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2121.849583] ? wait_for_completion_io+0x270/0x270 [ 2121.850464] ? rcu_read_lock_any_held+0x75/0xa0 [ 2121.851312] ? vfs_write+0x354/0xb10 [ 2121.851988] ? fput_many+0x2f/0x1a0 [ 2121.852644] ? ksys_write+0x1a9/0x260 [ 2121.853347] ? __ia32_sys_read+0xb0/0xb0 [ 2121.854155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2121.855130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2121.856057] do_syscall_64+0x33/0x40 [ 2121.856735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2121.857678] RIP: 0033:0x7ff4e8a17b19 [ 2121.858368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2121.861666] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2121.863070] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2121.864361] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2121.865654] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2121.866978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2121.868243] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2121.894242] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2121.912379] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:01:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000180000006001520d0e4af073ba83dcc06ca5a21883e592d20900835873b2530b50b0059e0ea24ed36a3c34473835e70012291bc63c18986a8ebb5449f3f95711b1730faaac6ffaaf055f1e04e2696fa6d4b1373fcab7d24e02008943c57ff7f6ddbbb4665e092d46fcbf054028d43589a3e350439c266868b2c3968c3526e39c5e60962b1aee1136b433c903f07a1236a789ec2733a656c25f1b9008162a8af07129f7cd1e58d6c0bf53c6668053a57e15683f0ffd56233773df", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x10, 0x40, 0x2, 0x5, 0x0, 0x8, 0x57902, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7ff, 0x4}, 0x1101, 0x6, 0xaaf0, 0x5, 0x4, 0x8, 0x9, 0x0, 0x800, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r3, 0x0) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:01:55 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r3 = syz_io_uring_setup(0x7bb3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c, 0x800) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000480)={r8, r9/1000+60000}, 0x10) syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x9011, 0x10, 0x10000, 0xc4}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x1, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000440), 0x7f, &(0x7f0000ffd000/0x2000)=nil, 0x4) syz_io_uring_submit(r10, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:01:55 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:01:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:01:55 executing program 6: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) unshare(0x10000400) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x3, 0x2f, 0xb6, 0x0, 0x5, 0x200, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x400, 0x46, 0x200, 0x0, 0x1, 0x7fffffff, 0xfff, 0x0, 0xffff, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) unshare(0x48020200) unshare(0x2020e80) 00:01:55 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:01:55 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:01:55 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2d4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x40, 0x18}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0x8, 0x9, 0xed, 0x6, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x8}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {}, {0x4}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x1c}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x3, 0x6c, 0x1, 0x4, 0x48, 0x60, 0x36, 0x60, 0x6]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0xa}, {0x7, 0xa}, {0x4, 0x9}, {}, {0x3, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x4}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x2}, {0x7, 0xa}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x2}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0xa}, {0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x60, 0x36, 0x9, 0xc, 0xb, 0x30, 0x5, 0x4, 0x36, 0x12, 0x3, 0x6c, 0x2, 0x3, 0x12, 0x12, 0x5, 0x2, 0x5, 0x2, 0xc, 0x30, 0x48, 0x4, 0x9, 0x2, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x124, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x9}, {0x6, 0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x6}, {0x0, 0x1}, {}, {0x7, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x48, 0x12, 0x1, 0xc, 0xc, 0x60, 0x48, 0x13, 0x36, 0x4, 0xb, 0x4, 0x18, 0x1, 0x2, 0x1, 0x60, 0x3, 0x2, 0x36, 0x6c, 0x6, 0x18, 0x48, 0x16, 0x36, 0x2, 0x5, 0x6c, 0x4, 0x3]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x2, 0xb, 0x60, 0x0, 0x2, 0x1, 0x36, 0x9, 0x4, 0x24, 0x53, 0x0, 0x1b, 0xb, 0x16, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0xb3, 0x0, 0x8, 0x7, 0x6, 0xd8]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x6}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x8}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x5}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x3}, {0x3, 0xa}, {0x6, 0x1}, {0x7, 0x4}, {0x2, 0x6}, {0x6, 0xa}, {0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x1}, {0x5}, {0x1, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0x4, 0x24, 0x170, 0x5, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x5}, {0x5, 0x8}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {}, {0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x5, 0x4}, {}, {0x3, 0x8}, {0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x6, 0x1, 0x4, 0x1, 0x24]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0xa}, {0x4, 0x6}, {0x3, 0x8}, {0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {}, {0x2, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x5}, {0x5, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {}, {0x5, 0x3}, {0x4, 0x5}, {0x5, 0x3}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0xa}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {}, {0x2, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {}, {0x0, 0x4}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x9}, {0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x6, 0x8}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x4}, {0x4, 0x1}, {0x3}, {0x6, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1a5b, 0x3, 0x4, 0x400, 0x8000, 0x40, 0xc]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x494, 0x6, 0xa55383ecce13cf6c, 0x401, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x9}, [@nested={0xcc, 0x42, 0x0, 0x1, [@generic="78140622dd065af33fe82f0cf3a677faf26899db8b3829ce6da6be0f36cd3fb328c3a3ab10454774846d62ba1a81086283bc9f0d105c19ea9f48ed2f730eef3b4bd80c35dc1c673fb228ee8638991f5c695fc4f50bc34cf42abc9c663637846efa9e6f65eca13887d2befd7e00a961acde44b3d6b51f4d9c37014cd0", @typed={0x4a, 0x8d, 0x0, 0x0, @binary="3341b855e8ee5d1e12cab17ae2ad6c39227b787f788b9696a4320b29ee52b6750a6aa6b9591e76ec8434ee852fc2d9f9e0acb4001466e5191eea2e05f403af2586386d3db7eb"}]}, @nested={0x74, 0x53, 0x0, 0x1, [@generic="a7683a10adfd7a3b541f7b0476424003a89548e0a3f3a891dac855309c93ef0da7044fbc344ad188dca6a4feff2a6842180e615e96ae0ff4fdff15d8cf4396c34451c2c1345f54b528742bf6887300dbaab0a9644a4096783553038cba32f352", @typed={0x8, 0x27, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x32, 0x0, 0x0, @fd}]}, @nested={0x1e6, 0x6b, 0x0, 0x1, [@generic="47784acc0c0fd20c96aed9a76d506c817e0abe1ccbb72cd3a40ac0fd45db0adf0dba96a900c03a4396eebce553282c5a9d785b47c170179a25f81da08bacd7efc94c15440b1684315636a6b45c1f1fc37244dd0323b588c66ac1820f3e0715f7481ec7896ed29c47d992a823817431507c3c6224b61734a0590e2c5a241834c76e90c3fe6aca1ad4", @typed={0x9d, 0x36, 0x0, 0x0, @binary="2ee7788013def5b6e6ccf3bc148203bdc944b3fdf7441ba3608fb7a587391f9e6a178dfa42849224accd8ad6f0d8717d1f1fbe9a0e8c0d367e0cc5babd77015149184ecae8f8b0abef418d3852e6e3479521e77d36bbd3e144070a8925a0c4777c86d1ffb9df4a6f161c16dcd1a1e266d09b01ec85456aa9e2cff30b239742febbc582b904e5b7f14c7ab7c2421a68c68f0489f403c471eacf"}, @typed={0x6, 0x31, 0x0, 0x0, @str=']\x00'}, @typed={0x8, 0x41, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="418b4881158b11653be9935a1494a04ecc3bdd9138a7748015233537ae411e160340e1001ddd0c356312e7daaf1bff52551214e939bd2c2c1ef52084629b2a00b855cf63b98003e73187cc0b58a2b2526f83b5a49d12efe101dbd14c0546c6830182b34b1bcff9f020fa684bb8f057771585fb0dc004bb843c", @generic, @generic="e3ea110ab3f1ae344031f3af20c51540bbe2355069dbdbcf10d1525b9f75f23b6eb4e320e0a803f1ee"]}, @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@private2}, @generic="593bfe4b087d0cfc43193d5000a8dad7ddea947187894f8f23e0774cc9bc6d8f64ee5b560d311a8435fa79d89e4d6ee5cdf3f0ab82613b7ef4a50382488bdbb03082bd32af4754e11c1bc999916d7e5b75b9ef685cdeb590ae4f1a6c1a9435677113ac8003f502cfdcf57d27fdc0b8a4c7dfd16cc349f8dfe7f0b38bd35c718bbad239b2ae10b5e7d80524b332ed3867d0243eb28113cd01a046a16f8574563716b16fd04f03bd1dcfcb10e2248de10df2082e6561a4a7179dd7b13669889d5a33a3", @generic="12aeef40f6d6a7268cb7af7779f42eeaf33c6976cf7287bd8a897945e69ecb95df31999e08f98bd3f952252311ad397966df2f9ed72411026d8958c7b880cf8e10979f252dfc61059ae987587b227c81c351ed404b23c775a16d515363bc942b66d3bea540f7531e6a9ed46000f048db529cc46604ee85fc36906da19276", @typed={0x4, 0x26}]}, 0x494}, 0x1, 0x0, 0x0, 0x8000}, 0x810) [ 2138.804964] FAULT_INJECTION: forcing a failure. [ 2138.804964] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.807801] CPU: 1 PID: 11622 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2138.809267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2138.811049] Call Trace: [ 2138.811628] dump_stack+0x107/0x167 [ 2138.812388] should_fail.cold+0x5/0xa [ 2138.813212] ? create_object.isra.0+0x3a/0xa20 [ 2138.814219] should_failslab+0x5/0x20 [ 2138.815038] kmem_cache_alloc+0x5b/0x310 [ 2138.815922] ? mark_held_locks+0x9e/0xe0 [ 2138.816870] create_object.isra.0+0x3a/0xa20 [ 2138.817888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2138.818978] kmem_cache_alloc_bulk+0x168/0x320 [ 2138.819964] io_submit_sqes+0x6fe6/0x8610 [ 2138.820888] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2138.822020] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2138.823216] ? find_held_lock+0x2c/0x110 [ 2138.824218] ? io_submit_sqes+0x8610/0x8610 [ 2138.825279] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2138.826477] ? wait_for_completion_io+0x270/0x270 [ 2138.827675] ? rcu_read_lock_any_held+0x75/0xa0 [ 2138.828793] ? vfs_write+0x354/0xb10 [ 2138.829708] ? fput_many+0x2f/0x1a0 [ 2138.830606] ? ksys_write+0x1a9/0x260 [ 2138.831536] ? __ia32_sys_read+0xb0/0xb0 [ 2138.832532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2138.833831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2138.835115] do_syscall_64+0x33/0x40 [ 2138.836024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2138.837233] RIP: 0033:0x7ff4e8a17b19 [ 2138.838159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2138.842605] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2138.844438] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2138.846163] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2138.847892] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.849608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2138.851319] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2138.853731] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2138.898762] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2138.953579] FAULT_INJECTION: forcing a failure. [ 2138.953579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2138.955116] CPU: 0 PID: 11618 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2138.955967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2138.956977] Call Trace: [ 2138.957312] dump_stack+0x107/0x167 [ 2138.957766] should_fail.cold+0x5/0xa [ 2138.958253] __alloc_pages_nodemask+0x182/0x600 [ 2138.958829] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2138.959586] alloc_pages_current+0x187/0x280 [ 2138.960128] allocate_slab+0x26f/0x380 [ 2138.960607] ___slab_alloc+0x470/0x700 [ 2138.961086] ? io_submit_sqes+0x6fe6/0x8610 [ 2138.961624] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2138.962209] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2138.962770] io_submit_sqes+0x6fe6/0x8610 [ 2138.963296] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2138.963907] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2138.964496] ? find_held_lock+0x2c/0x110 [ 2138.964989] ? io_submit_sqes+0x8610/0x8610 [ 2138.965524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2138.966440] ? wait_for_completion_io+0x270/0x270 [ 2138.967756] ? rcu_read_lock_any_held+0x75/0xa0 [ 2138.969012] ? vfs_write+0x354/0xb10 [ 2138.970031] ? fput_many+0x2f/0x1a0 [ 2138.970958] ? ksys_write+0x1a9/0x260 [ 2138.971807] ? __ia32_sys_read+0xb0/0xb0 [ 2138.972717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2138.974076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2138.975251] do_syscall_64+0x33/0x40 [ 2138.976101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2138.977261] RIP: 0033:0x7fa8c8de3b19 [ 2138.978193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2138.982303] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2138.983996] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2138.985674] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2138.987372] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.988966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2138.990570] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:02:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7400, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="0100ea000100000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) pipe(&(0x7f0000000040)) 00:02:09 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:02:09 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x4, 0x4) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) read(r2, &(0x7f0000000000)=""/96, 0x60) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:02:09 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:09 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000020301030000000000000000030000010800054000000002ad490b7036ed0d28a9d25a704e5af87f76700e7e2df2828a325319167a5de7afbe384d63faffffffffffffff5d05e0ac763a"], 0x1c}}, 0x4000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xd8499488957a772f}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000fedbdf25210000000c00050000000000000000000c0005000201aaaaaaaaaaaa0c0005000200aaaaaaaaaaaa0c0005000201aaaaaaaaaaaa050020000100000009001f00706879300000000009001f007068793000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4008894) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000380)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:02:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x2f, 0x6, 0xf5, 0x295faaa0, 0x30, @remote, @empty, 0x1, 0x700, 0x3, 0xffffafaf}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {0x0}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "9755154351ac9a"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r7 = getpgrp(0x0) pidfd_open(r7, 0x0) syz_open_procfs(r7, &(0x7f0000000580)='attr\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) 00:02:09 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2153.175035] FAULT_INJECTION: forcing a failure. [ 2153.175035] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.177094] CPU: 0 PID: 11648 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2153.178337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.179832] Call Trace: [ 2153.180305] dump_stack+0x107/0x167 [ 2153.180955] should_fail.cold+0x5/0xa [ 2153.181664] ? create_object.isra.0+0x3a/0xa20 [ 2153.182489] should_failslab+0x5/0x20 [ 2153.183191] kmem_cache_alloc+0x5b/0x310 [ 2153.183917] ? mark_held_locks+0x9e/0xe0 [ 2153.184653] create_object.isra.0+0x3a/0xa20 [ 2153.185440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2153.186362] kmem_cache_alloc_bulk+0x168/0x320 [ 2153.187188] io_submit_sqes+0x6fe6/0x8610 [ 2153.187962] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.188869] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.189726] ? find_held_lock+0x2c/0x110 [ 2153.190471] ? io_submit_sqes+0x8610/0x8610 [ 2153.191245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2153.192105] ? wait_for_completion_io+0x270/0x270 [ 2153.192975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2153.193804] ? vfs_write+0x354/0xb10 [ 2153.194478] ? fput_many+0x2f/0x1a0 [ 2153.195147] ? ksys_write+0x1a9/0x260 [ 2153.195840] ? __ia32_sys_read+0xb0/0xb0 [ 2153.196573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2153.197635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2153.198584] do_syscall_64+0x33/0x40 [ 2153.199261] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2153.200191] RIP: 0033:0x7fa8c8de3b19 [ 2153.200885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2153.204258] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2153.205660] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2153.207011] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2153.208343] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2153.209646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.210993] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2153.222393] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2153.238277] FAULT_INJECTION: forcing a failure. [ 2153.238277] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.241139] CPU: 1 PID: 11658 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2153.242734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.244609] Call Trace: [ 2153.245278] dump_stack+0x107/0x167 [ 2153.246076] should_fail.cold+0x5/0xa [ 2153.246892] ? create_object.isra.0+0x3a/0xa20 [ 2153.247858] should_failslab+0x5/0x20 [ 2153.248656] kmem_cache_alloc+0x5b/0x310 [ 2153.249511] ? mark_held_locks+0x9e/0xe0 [ 2153.250384] create_object.isra.0+0x3a/0xa20 [ 2153.251347] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2153.252666] kmem_cache_alloc_bulk+0x168/0x320 [ 2153.253841] io_submit_sqes+0x6fe6/0x8610 [ 2153.255002] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.256276] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.257511] ? find_held_lock+0x2c/0x110 [ 2153.258568] ? io_submit_sqes+0x8610/0x8610 [ 2153.259698] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2153.260945] ? wait_for_completion_io+0x270/0x270 [ 2153.262190] ? rcu_read_lock_any_held+0x75/0xa0 [ 2153.263385] ? vfs_write+0x354/0xb10 [ 2153.264350] ? fput_many+0x2f/0x1a0 [ 2153.265275] ? ksys_write+0x1a9/0x260 [ 2153.266255] ? __ia32_sys_read+0xb0/0xb0 [ 2153.267318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2153.268662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2153.269993] do_syscall_64+0x33/0x40 [ 2153.270956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2153.272260] RIP: 0033:0x7ff4e8a17b19 [ 2153.273215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2153.277916] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2153.279868] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2153.281697] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2153.283403] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2153.284882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2153.286359] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2153.338281] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:02:10 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:10 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2153.508422] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:02:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:10 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2153.584107] FAULT_INJECTION: forcing a failure. [ 2153.584107] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.585889] CPU: 0 PID: 11678 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2153.586878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.588049] Call Trace: [ 2153.588413] dump_stack+0x107/0x167 [ 2153.588930] should_fail.cold+0x5/0xa [ 2153.589462] ? create_object.isra.0+0x3a/0xa20 [ 2153.590114] should_failslab+0x5/0x20 [ 2153.590662] kmem_cache_alloc+0x5b/0x310 [ 2153.591226] ? mark_held_locks+0x9e/0xe0 [ 2153.591806] create_object.isra.0+0x3a/0xa20 [ 2153.592411] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2153.593136] kmem_cache_alloc_bulk+0x168/0x320 [ 2153.593770] io_submit_sqes+0x6fe6/0x8610 [ 2153.594368] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.595046] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.595722] ? io_submit_sqes+0x8610/0x8610 [ 2153.596314] ? recalibrate_cpu_khz+0x10/0x10 [ 2153.596933] ? ktime_get+0x158/0x1f0 [ 2153.597437] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2153.598052] ? clockevents_program_event+0x131/0x360 [ 2153.598784] ? tick_program_event+0xa8/0x140 [ 2153.599400] ? hrtimer_interrupt+0x771/0x9b0 [ 2153.600031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2153.600785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2153.601505] do_syscall_64+0x33/0x40 [ 2153.602025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2153.602743] RIP: 0033:0x7ff4e8a17b19 [ 2153.603266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2153.605793] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2153.606831] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2153.607852] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2153.608813] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2153.609781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2153.610753] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2153.654491] FAULT_INJECTION: forcing a failure. [ 2153.654491] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.657422] CPU: 1 PID: 11681 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2153.658873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2153.660623] Call Trace: [ 2153.661187] dump_stack+0x107/0x167 [ 2153.661951] should_fail.cold+0x5/0xa [ 2153.662783] ? create_object.isra.0+0x3a/0xa20 [ 2153.663759] should_failslab+0x5/0x20 [ 2153.664559] kmem_cache_alloc+0x5b/0x310 [ 2153.665412] ? mark_held_locks+0x9e/0xe0 [ 2153.666283] create_object.isra.0+0x3a/0xa20 [ 2153.667231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2153.668320] kmem_cache_alloc_bulk+0x168/0x320 [ 2153.669298] io_submit_sqes+0x6fe6/0x8610 [ 2153.670212] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.671266] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2153.672309] ? find_held_lock+0x2c/0x110 [ 2153.673173] ? io_submit_sqes+0x8610/0x8610 [ 2153.674098] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2153.675132] ? wait_for_completion_io+0x270/0x270 [ 2153.676188] ? rcu_read_lock_any_held+0x75/0xa0 [ 2153.677244] ? vfs_write+0x354/0xb10 [ 2153.678045] ? fput_many+0x2f/0x1a0 [ 2153.678845] ? ksys_write+0x1a9/0x260 [ 2153.679665] ? __ia32_sys_read+0xb0/0xb0 [ 2153.680536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2153.681646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2153.682831] do_syscall_64+0x33/0x40 [ 2153.683620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2153.684712] RIP: 0033:0x7fa8c8de3b19 [ 2153.685504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2153.689442] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2153.691109] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2153.692613] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2153.694110] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2153.695621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.697117] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:02:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f00000002c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xab}, {0x0, 0x8000000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000120031cd00000000000001000a000000090000005ef6a6516b012000"], 0x20}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$getown(r2, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x12b0, 0x32, 0x400, 0x70bd29, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x8e, 0x0, 0x0, @pid}, @nested={0x15a, 0x3b, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="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", @typed={0x8, 0x87, 0x0, 0x0, @uid=r4}, @generic="af313566c80c994c81f11cca741f62138bdc24cd612d095a0f6627762d7267b571762e67c2d41fd3009a0be8a672b95b21a140b9a6c1e2833ff2f58c804f8970068cfbe1bcf0f934df57"]}, @nested={0x1108, 0x36, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0xffff}, @typed={0x4, 0x55}, @generic="27e5a60f22423c2828db17e980aec02cbf48946a749e96322c2e3472d7f5582a61d74a5f2da6d047075b10adeb310bbcad630a8efef2ea31545c7aa054cbec96165da9ec35b296ae784665f70204c1cc928cdd3a98e81b6702869162008ace1f92c22a5ab0bc32bdc1f8a05dd1270a468b9b644da6f4cdfe268bc729ce64c67a15e0df11759237", @typed={0x6, 0x8b, 0x0, 0x0, @str=',\x00'}, @generic="0b3b642d25d905ff77c39083d0190ded1d40569d41ab29923ce33b0a1f8c9329a48bddf806f4f7a176bf9be648995581f9a24bd0fd9b1c8d470187bee9d8dc5dca59cd14dd9b63a84420b2c4e7", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x6a}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x6}]}, @nested={0x24, 0x6b, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0xba}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x5ac8faa2}]}, 0x12b0}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x481800}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x10, 0x70bd29, 0x25dfdbff, {{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e24, 0x9, 0x4e24, 0x0, 0xa, 0xa0, 0x5e42ca00b53ab055, 0x0, 0x0, r4}, {@in6=@local, 0x4d5, 0xff}, @in6=@mcast1, {0x4, 0x9, 0x1, 0x5, 0x2, 0x0, 0x4, 0x5}, {0x0, 0x7, 0x5, 0x8}, {0x359, 0x20, 0x8001}, 0x70bd26, 0x3504, 0xa, 0x4, 0x5, 0x47}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff, 0xa471}}, './file1\x00'}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 00:02:10 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2153.705724] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2153.732282] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:02:10 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)=0xffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000340)="eae7c24dd8cf5a0ebccfa8ca605c50b77f704667cbe319c496fbf366638b93aac117862e8cd66ed02f46", &(0x7f00000004c0)="a2062d09568675082fa77f447660ad576a55ba8e2ebbe56b2ca92ac2a9a70cd06431d899f6380c1ec59f9b558a4cce2cbf9043d01eff33bb0e539dbee191c5d115ad3ea6b56203318cc71fea6e53f8ca3084d5e624ab750b913028bc0edc276d04081d205e0450ae8e3309894827fa8138984cc587a910a62b827e8a2340678bef148d0621ced56719234bb45d6e6451b01baed3c543816906513de0ef67a2f2dd4e8913ced18e82790252bc53b6ff24f722d95cfa3f8138f2fe4d1ae77aabf46eb0c3daa4b7dd4ac1f1bf969af5497d"}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_create(0x7, 0x0, &(0x7f0000000640)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000440)={{}, {0x77359400}}, &(0x7f0000000100)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000000000000030073010800054000000002fa13cb4b384f6df18d90abbc6023da262f95b011ce6f1fb892084b946c4c69afda550c52dd42e05c7780334df19167ac4226db2d1c3c9209e4fc788a044f2947b21a09fc2a3c23abebf03fb10ac67a9438df42818b589442ca5aa7d12aa88d8dd406bbed79060cace6ba986b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4040004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x81006c6b, &(0x7f00000002c0)={0x0, 0x20001, 0x0, 0x4, 0x158}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000080)) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x22040004}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000380)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:02:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2154.009854] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2154.069692] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:02:10 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(0xffffffffffffffff, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:10 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2154.132516] FAULT_INJECTION: forcing a failure. [ 2154.132516] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.135256] CPU: 1 PID: 11705 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2154.136685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2154.138370] Call Trace: [ 2154.138930] dump_stack+0x107/0x167 [ 2154.139680] should_fail.cold+0x5/0xa [ 2154.140448] ? create_object.isra.0+0x3a/0xa20 [ 2154.141374] should_failslab+0x5/0x20 [ 2154.142142] kmem_cache_alloc+0x5b/0x310 [ 2154.142968] ? mark_held_locks+0x9e/0xe0 [ 2154.143810] create_object.isra.0+0x3a/0xa20 [ 2154.144703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2154.145892] kmem_cache_alloc_bulk+0x168/0x320 [ 2154.146849] io_submit_sqes+0x6fe6/0x8610 [ 2154.147736] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2154.148760] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2154.149752] ? find_held_lock+0x2c/0x110 [ 2154.150611] ? io_submit_sqes+0x8610/0x8610 [ 2154.151528] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2154.152535] ? wait_for_completion_io+0x270/0x270 [ 2154.153546] ? rcu_read_lock_any_held+0x75/0xa0 [ 2154.154513] ? vfs_write+0x354/0xb10 [ 2154.155288] ? fput_many+0x2f/0x1a0 [ 2154.156047] ? ksys_write+0x1a9/0x260 [ 2154.156828] ? __ia32_sys_read+0xb0/0xb0 [ 2154.157668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2154.158755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2154.159817] do_syscall_64+0x33/0x40 [ 2154.160592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2154.161643] RIP: 0033:0x7ff4e8a17b19 [ 2154.162414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2154.166225] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2154.167814] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2154.169297] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2154.170843] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2154.172325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.173895] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:02:10 executing program 2: membarrier(0x20, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x10000) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:02:10 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:02:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r4, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x1f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x7}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xd1}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x76e}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1c0b}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048040) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) 00:02:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:10 executing program 6: sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x1080) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') setxattr$incfs_id(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240), &(0x7f0000000180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) chmod(&(0x7f0000000440)='./file0\x00', 0x6a) getpgrp(0xffffffffffffffff) open$dir(&(0x7f0000000500)='./file0/file0\x00', 0x10000, 0x64f21e44e4cd364) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x40, 0x20, 0x400, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x64, 0x0, 0x0, @fd=r4}]}, 0x40}}, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000140)={0x2a, 0x29, 0x2, {0x6, [{{0x20, 0x2, 0x5}, 0x1, 0x9, 0x7, './file0'}]}}, 0x2a) r5 = socket$netlink(0x10, 0x3, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x49, 0x29, 0x2, {0x4, [{{0x1, 0x4, 0x8}, 0xfffffffffffffffd, 0x4, 0x7, './file0'}, {{0x4b12165a2e08f5ae, 0x3, 0x1}, 0xffff, 0x8, 0x7, './file0'}]}}, 0x49) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') sendfile(r5, r0, 0x0, 0xec0) [ 2154.274321] FAULT_INJECTION: forcing a failure. [ 2154.274321] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.277757] CPU: 0 PID: 11711 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2154.279463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2154.281475] Call Trace: [ 2154.282124] dump_stack+0x107/0x167 [ 2154.283034] should_fail.cold+0x5/0xa [ 2154.283983] ? create_object.isra.0+0x3a/0xa20 [ 2154.285110] should_failslab+0x5/0x20 [ 2154.286044] kmem_cache_alloc+0x5b/0x310 [ 2154.287064] ? mark_held_locks+0x9e/0xe0 [ 2154.288062] create_object.isra.0+0x3a/0xa20 [ 2154.289131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2154.290486] kmem_cache_alloc_bulk+0x168/0x320 [ 2154.291646] io_submit_sqes+0x6fe6/0x8610 [ 2154.292700] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2154.293906] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2154.295107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2154.296384] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2154.297463] ? trace_hardirqs_on+0x5b/0x180 [ 2154.298537] ? io_submit_sqes+0x8610/0x8610 [ 2154.299587] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2154.300693] ? finish_task_switch+0x126/0x5d0 [ 2154.301791] ? finish_task_switch+0xef/0x5d0 [ 2154.302874] ? __switch_to+0x572/0xf70 [ 2154.303814] ? __switch_to_asm+0x3a/0x60 [ 2154.304892] ? __switch_to_asm+0x34/0x60 [ 2154.305892] ? __schedule+0x82c/0x1ea0 [ 2154.306873] ? io_schedule_timeout+0x140/0x140 [ 2154.307982] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2154.309100] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2154.310410] ? ksys_write+0x1a9/0x260 [ 2154.311375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2154.312632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2154.313880] do_syscall_64+0x33/0x40 [ 2154.314798] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2154.316043] RIP: 0033:0x7fa8c8de3b19 [ 2154.316946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2154.321361] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2154.323173] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2154.323225] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2154.323248] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2154.328552] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2154.330260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2154.331972] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2154.370602] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2154.377266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pid=11723 comm=syz-executor.6 00:02:11 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2154.398262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pid=11723 comm=syz-executor.6 [ 2154.444733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pid=11723 comm=syz-executor.6 [ 2154.464887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=553 sclass=netlink_route_socket pid=11725 comm=syz-executor.6 00:02:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:29 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r5 = dup2(r1, r4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="0922f90e71ca000018000000a9d5058f797b669be95dac0e437345c6db51a1505025da0e2775aa8e4c858f683c3974a595cc1a82a11d7231089c8172d57260c3a009f0ee181051d4306dd4061a41aaebc993213c1fd677311ad61a17feac7a9d", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r6 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r6}}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') 00:02:29 executing program 1: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) r3 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) dup2(r3, r6) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x810, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r8 = socket$inet(0x2, 0x3, 0xff) r9 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r9, r7, 0x0, 0x4000007ffffffc) 00:02:29 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:02:29 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) dup(r0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:02:29 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:29 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 2172.401079] FAULT_INJECTION: forcing a failure. [ 2172.401079] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.403928] CPU: 0 PID: 11742 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2172.405466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.407311] Call Trace: [ 2172.407908] dump_stack+0x107/0x167 [ 2172.408728] should_fail.cold+0x5/0xa [ 2172.409592] should_failslab+0x5/0x20 [ 2172.410439] kmem_cache_alloc_bulk+0x4b/0x320 [ 2172.411469] io_submit_sqes+0x6fe6/0x8610 [ 2172.412435] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.413546] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2172.414758] ? find_held_lock+0x2c/0x110 [ 2172.415909] ? io_submit_sqes+0x8610/0x8610 [ 2172.417083] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2172.418228] ? wait_for_completion_io+0x270/0x270 [ 2172.419359] ? rcu_read_lock_any_held+0x75/0xa0 [ 2172.420403] ? vfs_write+0x354/0xb10 [ 2172.421230] ? fput_many+0x2f/0x1a0 [ 2172.422053] ? ksys_write+0x1a9/0x260 [ 2172.422904] ? __ia32_sys_read+0xb0/0xb0 [ 2172.423850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2172.425029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2172.426191] do_syscall_64+0x33/0x40 [ 2172.427034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.428221] RIP: 0033:0x7ff4e8a17b19 [ 2172.429058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.433206] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2172.434918] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2172.436545] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2172.438147] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.439769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2172.439856] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2172.441373] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2172.495608] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:02:29 executing program 2: r0 = socket$inet(0x2, 0x4, 0x9a) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$inet(0x2, 0x6, 0x100) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) getsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x0, @empty}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @multicast1}, {0x6, @remote}, 0x50, {0x2, 0x4e22, @remote}, 'wlan0\x00'}) 00:02:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:29 executing program 7: unshare(0x28020600) r0 = semget$private(0x0, 0x4, 0x100) unshare(0x0) unshare(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x72000300) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076defbffffff82c1048dcc221e6b31f3c8f0cb3949f8e9ccfd62c5cdb805bec7163e36a1741a381ab25a3d352947291fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708c"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) openat(r4, &(0x7f0000000040)='./file0\x00', 0x802, 0x0) unshare(0x48020200) 00:02:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x0) lseek(r1, 0x0, 0x0) [ 2172.837459] FAULT_INJECTION: forcing a failure. [ 2172.837459] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.840631] CPU: 1 PID: 11763 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2172.842238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.844102] Call Trace: [ 2172.844706] dump_stack+0x107/0x167 [ 2172.845526] should_fail.cold+0x5/0xa [ 2172.846379] ? create_object.isra.0+0x3a/0xa20 [ 2172.847417] should_failslab+0x5/0x20 [ 2172.848271] kmem_cache_alloc+0x5b/0x310 [ 2172.849174] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 2172.850324] create_object.isra.0+0x3a/0xa20 [ 2172.851301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2172.852435] __kmalloc+0x16e/0x390 [ 2172.853241] io_wq_create+0xeb/0xc00 [ 2172.854080] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2172.855222] ? io_import_iovec+0x1120/0x1120 [ 2172.856201] ? io_apoll_task_func+0x2d0/0x2d0 [ 2172.857198] ? __io_req_find_next+0x300/0x300 [ 2172.858202] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2172.859285] __io_uring_add_tctx_node+0x2c6/0x520 [ 2172.860356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2172.861537] __do_sys_io_uring_enter+0x146f/0x1890 [ 2172.862631] ? find_held_lock+0x2c/0x110 [ 2172.863559] ? io_submit_sqes+0x8610/0x8610 [ 2172.864532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2172.865609] ? wait_for_completion_io+0x270/0x270 [ 2172.866681] ? rcu_read_lock_any_held+0x75/0xa0 [ 2172.867729] ? vfs_write+0x354/0xb10 [ 2172.868563] ? fput_many+0x2f/0x1a0 [ 2172.869423] ? ksys_write+0x1a9/0x260 [ 2172.870274] ? __ia32_sys_read+0xb0/0xb0 [ 2172.871193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2172.872367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2172.873510] do_syscall_64+0x33/0x40 [ 2172.874338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.875490] RIP: 0033:0x7fa8c8de3b19 [ 2172.876315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.880375] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2172.882056] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2172.883641] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2172.885217] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.886787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2172.888375] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:02:44 executing program 6: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000041ed57bb2aafc627", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00347d039275d0a635653000"]) fcntl$setstatus(r2, 0x4, 0xe555054fb890814a) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x3, 0x13}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r1, 0x406, r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendfile(r4, r2, 0x0, 0x666) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x7330, &(0x7f00000001c0)={0x0, 0x3f6a, 0x20, 0x0, 0x27f, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000380)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="1f000000000000002e1c66696c65300048580615accd4b119250e6704d7dae7a5b3cbb589b8779aa7ed2a016f6167a32a11bbe047f7a64583012fe6ffaf91766bc09165555c7fcc8ed0a689a73a7c43f47cb65e545690876e8152a098edf20bc5f4eeacaf1d476e446ea0854779007f73e7e05c3b7598fcee74dee8f4f64bc865c3c9fac049b2f01e3cf1f798855b09aeb8d93d0ecf8807b28ba000e6a66474dbd3aac349dd0aace1ae6c706ce481dc72d942fa8099e97242a2ec2c35bee5f2108d3b449ab41ad9cf5b8f1064738c9a95fc0534960fa94"]) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x0, @fd=r8, 0x1ff, 0x4, 0x7, 0xe, 0x1, {0x1}}, 0x6) 00:02:44 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x40c40, 0x0) lseek(r1, 0x100000000, 0x2) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) 00:02:44 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:02:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:44 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket(0x8, 0x80000, 0x0) ioctl$sock_proto_private(r1, 0x89ec, &(0x7f0000000000)="ff1e4f791587c3d236b7abe1ee8c933e9a3f1d2fa8b0d26f3f152e0c92d14b8b7a8be94d3176452645ebc7bfc01b88099b3a4ea5497f3e667cb0104eb23bb7a264faf17c17bf01ead64088b86c8f4794dc13e5bef38109e9ff624283d9be1460a0cacb0c328c5da7325dd5306a131a371c2a45f46cdba3b53c40e1871f1510a46428c16b52cb2cadcc2df8ac37aeab431e3fef25a63a9e27dda08e2229dfca9d6c0beb8499a92c31f5e47faf997f386ab9babf00af7624ede0834244a74dda921ea836") r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891a, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @empty}}) 00:02:44 executing program 7: socket$nl_route(0x10, 0x3, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x35, 0x64, 0x61, 0x65, 0x39, 0x54, 0x62, 0x39, 0x62, 0x0, 0x64, 0xc1c9a57ec6d024b4, 0x5f, 0x64, 0x5c]}, &(0x7f0000000780)={0x0, "1ad6f4761f0d56fa02501495064dd09f3e5fa53b51535a2040cc47db8f2248218d0afa6e958ec5f854606bf186af7ab21490ff752bd2b16700", 0x15}, 0x48, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000004c0), 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x56de, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') setresuid(0xffffffffffffffff, r4, 0x0) r6 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="b6dab5530c5c89f372e87cb4459e6cf66ac1284ae7fc045a50e45267eb74f335d787123401416470449512dc1965ca25cbf522acf8560514276851157a46dfbe1fe300755593380061884cb19585909e3c0985259c60ed0e54ee2782cce304e3db60247ed2d5415d3255400001f75b10995095c735da3170277e04e36ff8df5257662c63ba2de060109b9149817795abbd7c836c56f9d21bf57c752ba7aecd03", 0xa0}], 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB='nojoliet,map=off,check=relaxed,gid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=r4, @ANYBLOB=',session=0x0000000000000010,nojoliet,nojoliet,hide,fowner=', @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC=r4, @ANYBLOB="2c7065726d69745f646972656374fa6f2c00"]) statx(r6, &(0x7f0000000400)='./file0\x00', 0x100, 0x8, &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:44 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2188.203390] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2188.211290] FAULT_INJECTION: forcing a failure. [ 2188.211290] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.214004] CPU: 1 PID: 11815 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2188.215200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.216517] Call Trace: [ 2188.216938] dump_stack+0x107/0x167 [ 2188.217614] should_fail.cold+0x5/0xa [ 2188.218216] ? create_object.isra.0+0x3a/0xa20 [ 2188.218981] should_failslab+0x5/0x20 [ 2188.219580] kmem_cache_alloc+0x5b/0x310 [ 2188.220237] create_object.isra.0+0x3a/0xa20 [ 2188.220927] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2188.221727] kmem_cache_alloc_bulk+0x168/0x320 [ 2188.222459] io_submit_sqes+0x6fe6/0x8610 [ 2188.223136] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.223936] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.224690] ? find_held_lock+0x2c/0x110 [ 2188.225327] ? io_submit_sqes+0x8610/0x8610 [ 2188.226009] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2188.226765] ? wait_for_completion_io+0x270/0x270 [ 2188.227517] ? rcu_read_lock_any_held+0x75/0xa0 [ 2188.228247] ? vfs_write+0x354/0xb10 [ 2188.228825] ? fput_many+0x2f/0x1a0 [ 2188.229389] ? ksys_write+0x1a9/0x260 [ 2188.229982] ? __ia32_sys_read+0xb0/0xb0 [ 2188.230621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.231429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.232262] do_syscall_64+0x33/0x40 [ 2188.232850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2188.233647] RIP: 0033:0x7ff4e8a17b19 [ 2188.234222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.237166] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2188.238420] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2188.239589] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2188.240747] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2188.241868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2188.242991] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:02:44 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2188.398050] FAULT_INJECTION: forcing a failure. [ 2188.398050] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.400398] CPU: 1 PID: 11831 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2188.401588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.403034] Call Trace: [ 2188.403532] dump_stack+0x107/0x167 [ 2188.404234] should_fail.cold+0x5/0xa [ 2188.404932] ? create_object.isra.0+0x3a/0xa20 [ 2188.405771] should_failslab+0x5/0x20 [ 2188.406460] kmem_cache_alloc+0x5b/0x310 [ 2188.407198] ? mark_held_locks+0x9e/0xe0 [ 2188.407922] create_object.isra.0+0x3a/0xa20 [ 2188.408680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2188.409558] kmem_cache_alloc_bulk+0x168/0x320 [ 2188.410399] io_submit_sqes+0x6fe6/0x8610 [ 2188.411161] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.412016] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.412887] ? find_held_lock+0x2c/0x110 [ 2188.413627] ? io_submit_sqes+0x8610/0x8610 [ 2188.414416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2188.415298] ? vfs_write+0x344/0xb10 [ 2188.415996] ? wait_for_completion_io+0x270/0x270 [ 2188.416887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2188.417748] ? vfs_write+0x354/0xb10 [ 2188.418359] ? fput_many+0x2f/0x1a0 [ 2188.418938] ? ksys_write+0x1a9/0x260 [ 2188.419541] ? __ia32_sys_read+0xb0/0xb0 [ 2188.420206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.421012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.421855] do_syscall_64+0x33/0x40 [ 2188.422443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2188.423260] RIP: 0033:0x7ff4e8a17b19 [ 2188.423873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.426793] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2188.428037] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2188.429161] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2188.430295] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2188.431422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2188.432559] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2188.443935] FAULT_INJECTION: forcing a failure. [ 2188.443935] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.445748] CPU: 1 PID: 11832 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2188.446842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.448177] Call Trace: [ 2188.448594] dump_stack+0x107/0x167 [ 2188.449168] should_fail.cold+0x5/0xa [ 2188.449772] ? io_wq_create+0x6ef/0xc00 [ 2188.450396] should_failslab+0x5/0x20 [ 2188.450996] kmem_cache_alloc_node_trace+0x59/0x340 [ 2188.451792] io_wq_create+0x6ef/0xc00 [ 2188.452386] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2188.453190] ? io_import_iovec+0x1120/0x1120 [ 2188.453860] ? io_apoll_task_func+0x2d0/0x2d0 [ 2188.454564] ? __io_req_find_next+0x300/0x300 [ 2188.455271] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2188.456047] __io_uring_add_tctx_node+0x2c6/0x520 [ 2188.456813] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2188.457651] __do_sys_io_uring_enter+0x146f/0x1890 [ 2188.458427] ? find_held_lock+0x2c/0x110 [ 2188.459072] ? io_submit_sqes+0x8610/0x8610 [ 2188.459769] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2188.460527] ? wait_for_completion_io+0x270/0x270 [ 2188.461287] ? rcu_read_lock_any_held+0x75/0xa0 [ 2188.462018] ? vfs_write+0x354/0xb10 [ 2188.462602] ? fput_many+0x2f/0x1a0 [ 2188.463178] ? ksys_write+0x1a9/0x260 [ 2188.463791] ? __ia32_sys_read+0xb0/0xb0 [ 2188.464425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.465249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.466062] do_syscall_64+0x33/0x40 [ 2188.466647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2188.467445] RIP: 0033:0x7fa8c8de3b19 [ 2188.468035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.470906] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2188.472110] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2188.473224] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2188.474336] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2188.475454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.476576] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:02:45 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/148, 0x94}], 0x2, &(0x7f0000000400)=""/104, 0x68}, 0x2) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x10000, 0x620001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004c940)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cb40)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000004cd40)={0x0, 0x0, "08a0e0e4f038ee43fbd7605553b0b2bd27346a08b25fa06587188a2782137413d7d040b02e4aaf3015c91ba825df5b4ac07ded9f4038f676ed15ad24a783f4d8d198b60bf991d21f0e46be5bb8675b6ca3c9c0883f3484c46a3640e82ad44ec4b1f8c6f80b87ca67c95ffb7930f8cc8b84512b3203fcc7d0eeca159c574bf4812ab123d42b28efa22833fa0822ea3cfb882c554cf8c9e8219064209de162fe8fd6e01f2874108a236fcb5abbb376332f333903379b0f10247d2dc4be39f6b1d694a27fe421c4e1202c3316ac9b635008d3f5c486a7cc498e45acce842a0783188e963707be79d2ac60cb826e50cdd5eee24c3f0a5a284d84af19d7e967c84b5d", "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"}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = accept$inet(r2, &(0x7f00000004c0), &(0x7f0000000500)=0x10) r5 = fcntl$getown(r0, 0x9) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000005c0), &(0x7f0000000600)=0x40) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0x7}, 0x7) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x81, 0xff, 0x7, 0x75, 0x0, 0x6, 0x14000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x4, @perf_config_ext={0x7, 0x2}, 0x807, 0x1, 0x0, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3, 0x0, 0x5}, r5, 0xe, 0xffffffffffffffff, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x4) 00:02:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:02:45 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:02:45 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:02:45 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2188.659212] FAULT_INJECTION: forcing a failure. [ 2188.659212] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.661368] CPU: 1 PID: 11847 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2188.662337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.663473] Call Trace: [ 2188.663849] dump_stack+0x107/0x167 [ 2188.664350] should_fail.cold+0x5/0xa [ 2188.664880] ? create_object.isra.0+0x3a/0xa20 [ 2188.665505] should_failslab+0x5/0x20 [ 2188.666031] kmem_cache_alloc+0x5b/0x310 [ 2188.666596] ? mark_held_locks+0x9e/0xe0 [ 2188.667154] create_object.isra.0+0x3a/0xa20 [ 2188.667756] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2188.668462] kmem_cache_alloc_bulk+0x168/0x320 [ 2188.669095] io_submit_sqes+0x6fe6/0x8610 [ 2188.669688] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.670366] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.671019] ? find_held_lock+0x2c/0x110 [ 2188.671585] ? io_submit_sqes+0x8610/0x8610 [ 2188.672196] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2188.672853] ? wait_for_completion_io+0x270/0x270 [ 2188.673511] ? rcu_read_lock_any_held+0x75/0xa0 [ 2188.674144] ? vfs_write+0x354/0xb10 [ 2188.674650] ? fput_many+0x2f/0x1a0 [ 2188.675151] ? ksys_write+0x1a9/0x260 [ 2188.675674] ? __ia32_sys_read+0xb0/0xb0 [ 2188.676232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.676943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.677645] do_syscall_64+0x33/0x40 [ 2188.678152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2188.678849] RIP: 0033:0x7fa8c8de3b19 [ 2188.679352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.681848] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2188.682891] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2188.683868] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2188.684837] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2188.685799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.686760] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2188.720467] FAULT_INJECTION: forcing a failure. [ 2188.720467] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.723816] CPU: 0 PID: 11849 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2188.725596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.727687] Call Trace: [ 2188.728363] dump_stack+0x107/0x167 [ 2188.729286] should_fail.cold+0x5/0xa [ 2188.730254] ? create_object.isra.0+0x3a/0xa20 [ 2188.731423] should_failslab+0x5/0x20 [ 2188.732397] kmem_cache_alloc+0x5b/0x310 [ 2188.733437] ? mark_held_locks+0x9e/0xe0 [ 2188.734477] create_object.isra.0+0x3a/0xa20 [ 2188.735588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2188.736906] kmem_cache_alloc_bulk+0x168/0x320 [ 2188.738077] io_submit_sqes+0x6fe6/0x8610 [ 2188.739168] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.740405] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2188.741643] ? find_held_lock+0x2c/0x110 [ 2188.742684] ? io_submit_sqes+0x8610/0x8610 [ 2188.743852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2188.745072] ? wait_for_completion_io+0x270/0x270 [ 2188.746302] ? rcu_read_lock_any_held+0x75/0xa0 [ 2188.747482] ? vfs_write+0x354/0xb10 [ 2188.748654] ? fput_many+0x2f/0x1a0 [ 2188.749645] ? ksys_write+0x1a9/0x260 [ 2188.750669] ? __ia32_sys_read+0xb0/0xb0 [ 2188.751915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.753223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.754369] do_syscall_64+0x33/0x40 [ 2188.755204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2188.756367] RIP: 0033:0x7ff4e8a17b19 [ 2188.757210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.761336] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2188.763030] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2188.764606] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2188.766179] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2188.767773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2188.769360] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:03:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:03:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x20) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:03:01 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:01 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat2(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0xa}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @generic={0x313, 0xc, 0x6, 0x7, 0x2, @random="6873bb95e159", "e357df297902a7", @random="191c10220888", "a2"}}}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsync(r2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x8000) dup(r3) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=bd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mm\x00\x00\x00\x00n=9p2000.L,\x00\x00\x00\x00\x00\x00']) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x20200, 0x0) 00:03:01 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:03:01 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff5dbecb12bf9fe, @perf_config_ext={0x8, 0xd3}, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000002c0)=0x2b) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/102, 0x66}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/33, 0x21}], 0x4) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x88ab470809e5752d) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x888c7f285cf1a4b3, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) fallocate(r1, 0x0, 0x0, 0x8800000) 00:03:01 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) [ 2205.208759] FAULT_INJECTION: forcing a failure. [ 2205.208759] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.210387] CPU: 1 PID: 11860 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2205.211351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.212495] Call Trace: [ 2205.212867] dump_stack+0x107/0x167 [ 2205.213385] should_fail.cold+0x5/0xa [ 2205.213913] ? create_object.isra.0+0x3a/0xa20 [ 2205.214554] should_failslab+0x5/0x20 [ 2205.215080] kmem_cache_alloc+0x5b/0x310 [ 2205.215643] ? mark_held_locks+0x9e/0xe0 [ 2205.216208] create_object.isra.0+0x3a/0xa20 [ 2205.216839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.217547] kmem_cache_alloc_bulk+0x168/0x320 [ 2205.218193] io_submit_sqes+0x6fe6/0x8610 [ 2205.218792] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2205.219487] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2205.220166] ? find_held_lock+0x2c/0x110 [ 2205.220751] ? io_submit_sqes+0x8610/0x8610 [ 2205.221359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.222030] ? wait_for_completion_io+0x270/0x270 [ 2205.222699] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.223354] ? vfs_write+0x354/0xb10 [ 2205.223871] ? fput_many+0x2f/0x1a0 [ 2205.224388] ? ksys_write+0x1a9/0x260 [ 2205.224912] ? __ia32_sys_read+0xb0/0xb0 [ 2205.225481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.226201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.226913] do_syscall_64+0x33/0x40 [ 2205.227424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.228117] RIP: 0033:0x7ff4e8a17b19 [ 2205.228644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.231193] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.232253] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2205.233245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2205.234234] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.235222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.236194] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2205.241691] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2205.283892] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:02 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xe0c, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x80}, [{{0x254, 0x1, {{0x2, 0x81}, 0x3, 0xec, 0x41, 0x6, 0xd, 'syz1\x00', "7f054b8d02d263c9cd38f924fbd67c0a80c09d6643623f28bea3dfccc7d1fa2d", "a6584d255834da4dcb40484046ba9aa1d5cce9da4d14616a151c423c84ecdde3", [{0x400, 0x1, {0x2, 0x6}}, {0x6, 0x40, {0x1, 0x3}}, {0xf53f, 0x1, {0x2, 0xd72a}}, {0x8df8, 0x5, {0x3, 0x400}}, {0x3, 0x6, {0x2, 0xac21}}, {0x100, 0x4, {0x1, 0x2}}, {0x77d, 0x200, {0x3, 0x5}}, {0x980, 0x101, {0x3, 0xef}}, {0x8, 0x8000, {0x3, 0x4}}, {0x9, 0x83, {0x0, 0x1}}, {0x8, 0x7f, {0x3, 0x400}}, {0x9, 0x0, {0x3, 0xfffffffa}}, {0xfffb, 0x9, {0x2}}, {0x6c9, 0x40, {0xac3089869af29bca, 0x9}}, {0x3, 0x3ff, {0x1, 0xfffffffd}}, {0xfffe, 0x200, {0x2, 0x8000}}, {0x3, 0x20, {0x0, 0x7fff}}, {0x6, 0x1, {0x1, 0x8001}}, {0x6, 0x4, {0x3, 0x6}}, {0x5, 0x829, {0x0, 0x4f3}}, {0x3, 0x2, {0x0, 0x4}}, {0x9328, 0xd4, {0x2, 0x400000}}, {0x0, 0x8, {0x0, 0x4}}, {0x0, 0x8, {0x2, 0x8000}}, {0xfff, 0x9, {0x3, 0x200}}, {0x9, 0xf800, {0x0, 0x1}}, {0x3, 0xffff, {0x1, 0x8}}, {0x2, 0xfff, {0x2, 0x80000000}}, {0x1000, 0x1, {0x1}}, {0xfc00, 0x3ff, {0x3, 0xb39e}}, {0xfff, 0xec, {0x2, 0xfffffffb}}, {0x5, 0xa69a, {0x0, 0x5}}, {0x7fff, 0x1f}, {0x4, 0x1, {0x2, 0x7}}, {0x1000, 0xf000, {0x2, 0xbc52}}, {0x1, 0x3, {0x0, 0x80000000}}, {0x13, 0x81, {0x2, 0xa909}}, {0x1, 0x8000, {0x1, 0x2}}, {0xff80, 0xffaa, {0x0, 0x6}}, {0x9, 0x401, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0xfabcc6f135d0427a, 0x7ff}, 0x7, 0x5, 0x81, 0x2, 0xc, 'syz1\x00', "3d0d15c7c79d7c54e4b61e7d365e70853416117e64dc05720c384094b8e67adf", "6b1beebc6926f69b727c4ce3c87cfdb364e84cd273004813b732731f2d627a82", [{0x40, 0x800, {0x1, 0x6}}, {0x101, 0x7, {0x0, 0x75}}, {0x8000, 0x1, {0x3, 0x7f}}, {0x6d7, 0x7ff, {0x3, 0x10000}}, {0x4, 0x1, {0x2, 0x7}}, {0xff, 0x0, {0x1, 0x101}}, {0x8000, 0xf16c, {0x0, 0x3}}, {0xa2a, 0x5, {0x0, 0x2}}, {0x9, 0x6122, {0x2, 0x5}}, {0xa84, 0x3f, {0x2, 0x55a}}, {0x101, 0x2, {0x1, 0x800}}, {0x101, 0x9, {0x0, 0x8}}, {0x1, 0x7, {0x2, 0x4}}, {0x8, 0x4, {0x0, 0x80}}, {0x5, 0x8001, {0x2, 0x16f2ab24}}, {0x2, 0x3, {0x2, 0xffffffff}}, {0x0, 0x45, {0x3, 0x58a}}, {0x0, 0x3ff, {0x3, 0x8}}, {0x3ff, 0x3, {0x2, 0x1}}, {0x3, 0xdfdc, {0x0, 0x7}}, {0x7fff, 0x6, {0x2, 0x7}}, {0x8, 0x81, {0x0, 0x1f}}, {0x1, 0x4, {0x2, 0xffffff39}}, {0x7fff, 0x4, {0x2, 0x7}}, {0xfff8, 0x8, {0x3, 0x7f6}}, {0x79, 0x8, {0x0, 0x80}}, {0x7, 0x5, {0x2, 0x800}}, {0x4, 0x81, {0x3, 0x7bff}}, {0xffff, 0xffc0, {0x0, 0xf550}}, {0x0, 0x8001, {0x0, 0x80000001}}, {0x800, 0x8, {0x2, 0x3f}}, {0x2, 0x1, {0x0, 0xa89}}, {0x1, 0x9, {0x0, 0x3}}, {0x3, 0x7c57, {0x1, 0x6}}, {0x5, 0x0, {0x3, 0x3f}}, {0x4, 0xbd, {0x3, 0xe4c2}}, {0x3f, 0x8, {0x1, 0x3}}, {0x40, 0x5, {0x1, 0x8}}, {0x3, 0x1000, {0x1}}, {0x2, 0x8000, {0x0, 0x80000001}}]}}}, {{0x254, 0x1, {{0x2, 0x448}, 0x0, 0x6, 0x1, 0x6, 0x22, 'syz1\x00', "a9a43ecc2e394326f206fa6eadcb1755725eda34eb6d262e492bdff79ed854f4", "7dc6b3417ed71c0ff84a9b9c104f97e76b15dee6308ad913c46bae4f63e270dc", [{0x98, 0x586f, {0x2, 0x3ff}}, {0x4, 0x0, {0x1, 0x9}}, {0x7f, 0x2, {0x1, 0x5}}, {0xa28a, 0x800, {0x2, 0x7}}, {0xff, 0x0, {0x3, 0xf1}}, {0xe00, 0x3, {0x2, 0x8}}, {0x6, 0xfffd, {0x3, 0x2}}, {0x81, 0x8000, {0x1, 0xffff}}, {0x8001, 0x3d, {0x3, 0x8}}, {0x80, 0xffff, {0x2, 0xffff}}, {0x1, 0x0, {0x1}}, {0x9, 0x2, {0x2, 0x1}}, {0x3615, 0x2c, {0x3, 0xbf4}}, {0x713, 0x4, {0x1, 0x7fff}}, {0x6, 0x80, {0x1, 0x76}}, {0x704, 0x9, {0x0, 0x9}}, {0x5, 0x9b6, {0x3, 0x7fff}}, {0x1, 0x6, {0x2, 0x3f}}, {0x9, 0x4, {0x1, 0x1}}, {0xfffd, 0x5fe5, {0xa74a4d5b55162473, 0x7}}, {0x7ff, 0x7f, {0x0, 0x3}}, {0x80, 0x7fff, {0x2, 0x8}}, {0x6ea, 0x1, {0x3, 0x3}}, {0x3, 0x7641, {0x2, 0x9}}, {0x3, 0x7ff, {0x1, 0x1}}, {0x5, 0x20, {0x0, 0x5f64}}, {0x0, 0xa496, {0x2, 0x4}}, {0x3f, 0x3, {0x2, 0x3f}}, {0x9, 0x8, {0x0, 0xffffffff}}, {0x8, 0x9, {0x1, 0x4}}, {0x2, 0xf22, {0x1}}, {0x2, 0x5, {0x0, 0x7f}}, {0x3ff, 0x6, {0x0, 0xfffffff7}}, {0x7, 0x5, {0x1, 0x101}}, {0x7, 0x6d1c, {0x2}}, {0x8, 0x401, {0x0, 0x9}}, {0x2000, 0xfff, {0x2, 0x7ff}}, {0xbedd, 0x3}, {0x9, 0x3, {0x3, 0x4}}, {0xd53, 0x800, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x8000}, 0x0, 0xfe, 0x2, 0xc485, 0x11, 'syz1\x00', "b71f1e9da8b47021747566ea8fa4a6af937192973d22bd0d5ce72c0f5554e19b", "ff0cb4ce6a1ddf2ca3276ffc64e843cbff483d3cb886f46be3efd4c5a6723266", [{0x100, 0xffff, {0x2, 0x6}}, {0x2, 0x3ff, {0x1, 0x7}}, {0x200, 0x61, {0x1, 0x8001}}, {0x2, 0xfffe, {0x3, 0x5}}, {0x400, 0x1, {0x0, 0xff}}, {0x1ff, 0xf0, {0x2, 0x80}}, {0x3f, 0x7, {0x3, 0x4}}, {0x6, 0x7d, {0x0, 0xb5}}, {0x401, 0x539c, {0x2, 0x6}}, {0x7, 0x9, {0x0, 0x5}}, {0x0, 0x81, {0x3, 0xc9a}}, {0x8, 0x0, {0x3, 0x10001}}, {0x2, 0x6, {0x0, 0x8d4}}, {0x2, 0x3f, {0x3, 0x7ff}}, {0x400, 0x1ff, {0x3, 0x8000}}, {0xfeff, 0xa526, {0x2, 0x77c}}, {0x1000, 0x62e2, {0x3, 0xfffff66b}}, {0xff, 0x5, {0x1, 0x8}}, {0x8, 0x94c, {0x2, 0x200f}}, {0xff, 0x1, {0x1, 0xfff}}, {0x6, 0x2, {0x3, 0x4}}, {0x2, 0x5, {0x2, 0x2}}, {0x0, 0x324, {0x2, 0x3}}, {0xfffa, 0xff55, {0x2, 0x3}}, {0x5, 0x1e, {0x1, 0xffffff8a}}, {0xfffe, 0xfff, {0x3, 0x8}}, {0x2, 0x40, {0x3, 0x9}}, {0x4, 0x40, {0x3, 0x3}}, {0x0, 0x9200, {0x1, 0x10001}}, {0x3f, 0x27, {0x2, 0xc66d}}, {0x3, 0x1, {0x1, 0x9}}, {0x0, 0x7f, {0x2, 0x3f}}, {0x2, 0x3, {0x2, 0xfff}}, {0xff, 0x6, {0x1, 0x80000000}}, {0x5, 0x4, {0x0, 0xe84}}, {0x8, 0x5, {0x3, 0x7}}, {0x7cb, 0xfffd, {0x2, 0xb32}}, {0x1b, 0x7, {0x1, 0x2}}, {0xff, 0x101, {0x3, 0x5}}, {0x7, 0x8, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x3f, 0xec, 0x0, 0x2, 0x27, 'syz0\x00', "6335640ed29021451c4755e6d7c04069c43273fdea6ab87bb2a5762d5bf3546c", "4f415b202d41720d8390dc43e8d414f05f9fddb6eccd60479e989659390a30a1", [{0x20, 0x6, {0x3}}, {0x7, 0x20, {0x0, 0x7}}, {0x5, 0x3ff, {0x2, 0xbde}}, {0x5, 0x9, {0x3, 0x3}}, {0xff, 0x8, {0x3, 0x4}}, {0x401, 0x5, {0x2}}, {0x3f, 0x7f, {0x0, 0x2}}, {0x5, 0xbac, {0x3, 0x9}}, {0x5, 0xad, {0x0, 0x5}}, {0x1, 0x1, {0x0, 0xfffffff7}}, {0xe41, 0x400, {0x2, 0x7}}, {0x5, 0x5, {0x3, 0x1}}, {0x4, 0x1, {0x0, 0x7}}, {0xfff, 0x40, {0x3, 0x3}}, {0x7f, 0x0, {0x1, 0xffffff0f}}, {0x8, 0x9, {0x1}}, {0x4, 0xff01, {0x2, 0x3}}, {0xcf5a, 0xce69, {0x2, 0xe55}}, {0x9, 0x5, {0x3, 0xe34b}}, {0x3, 0x8, {0x0, 0x8c}}, {0xd68, 0x9b8, {0x3, 0x80000000}}, {0x40, 0x400}, {0x1, 0x800, {0x2, 0x6e0}}, {0x800, 0x1, {0x2, 0x1901}}, {0x9, 0x4, {0x1, 0x101}}, {0x21, 0x6, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x8a8f}}, {0x9, 0x0, {0x0, 0x7}}, {0x0, 0xa01f, {0x1, 0x8}}, {0x101, 0xfffb, {0x0, 0x80}}, {0x2, 0x81, {0x1, 0x7fffffff}}, {0x76b, 0x5, {0x0, 0x6}}, {0x6, 0x4, {0x2, 0x400}}, {0x6, 0x7f0, {0x0, 0x3}}, {0x40, 0x6, {0x3, 0x7}}, {0xfffa, 0xff00, {0x2, 0x8001}}, {0x6a, 0x0, {0x2, 0x2e}}, {0x8, 0x81, {0x3, 0x8}}, {0x7, 0x8a3d, {0x0, 0x1ff}}, {0x7, 0x9, {0x3, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x1a, 0x6, 0xffec, 0x4, 0x12, 'syz1\x00', "2d5d896732090d542b4e664f760d71199f1b70aafcfc46a925fdc9719060b7bd", "55af22b7b9ed677442df6cd0092a33b3ca0e6e4774ef5b5afc87eae978e8c8c4", [{0x3, 0x1, {0x0, 0x2}}, {0x3, 0x39, {0x0, 0x80}}, {0x4, 0x8000, {0x0, 0x1f}}, {0x6, 0x3, {0x1, 0x3}}, {0x20, 0x3, {0x1, 0x40}}, {0xc0, 0x5, {0x3, 0x6}}, {0x7, 0x0, {0x0, 0x800}}, {0x7872, 0x1, {0x1, 0x7}}, {0x4c68, 0xff01, {0x3, 0x31}}, {0x7, 0x8, {0x1, 0x6}}, {0xb26d, 0x6, {0x1, 0xffffffe0}}, {0x7, 0x3, {0x2, 0x200}}, {0xfffd, 0x3, {0x11417e8b0a1c5b0d, 0xffff}}, {0x5, 0x6, {0x3, 0x100}}, {0xf59, 0x83, {0x2, 0x72e2}}, {0x48f, 0x9, {0x3, 0x4}}, {0x9, 0x6, {0x1, 0x101}}, {0x5aa, 0x4, {0x2, 0xeccd}}, {0x5, 0x3, {0x3, 0x1}}, {0x1f, 0x7, {0x2, 0xe2ce}}, {0x7, 0x1f, {0x2, 0x10001}}, {0x14, 0x9, {0x2, 0x8}}, {0x4, 0x4, {0x3, 0x3f}}, {0x0, 0x9, {0x3, 0x1}}, {0x8, 0x1, {0x1}}, {0x1f, 0x2, {0x3, 0x6}}, {0xb432, 0x2, {0x0, 0x4}}, {0xc8, 0x1ff, {0x0, 0xdc16a30}}, {0x3ff, 0x6, {0x3, 0x7}}, {0x1f, 0x33, {0x2}}, {0x5b4, 0x8, {0x2, 0x3412}}, {0xbe, 0x5, {0x3, 0x5}}, {0x966, 0x81, {0x3, 0x20}}, {0x100, 0x400, {0x3, 0x9}}, {0x3, 0x6, {0x3, 0x8}}, {0x7, 0x3ff, {0x1, 0x80}}, {0xfffd, 0x1000, {0x2}}, {0x7ff, 0x7, {0x0, 0x29}}, {0x3, 0x4, {0x3, 0x5}}, {0x1, 0x8000, {0x1, 0x7}}]}}}]}, 0xe0c}}, 0x800) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r2 = dup(r1) syz_io_uring_setup(0x5b94, &(0x7f00000011c0)={0x0, 0x57a9, 0x4, 0x2, 0x36b, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000140)="9b59f7f1fd1f7372de7b7563afae787a95db73e9699667", 0x17}, {&(0x7f0000001040)="ad7e68ca9c98f2270de59df3bc460316e1626dd55c317a4fd0a8193be705db9ed56e4920893e946e43ec929bc220d0d38cdf68681fbeb6509880e9c889632e9c3977dd4ce3655f3032be381c4b7fad29c728b1ad497fb245375314fc69d3304f89c1bcd660b73fc296ab0eb1d381851c", 0x70}, {&(0x7f00000010c0)="a44f42e59e297ca622a6204a8bc6e8f0c7f734653990daf0ce548cba7f216a3501e1244757b204c21306c4a4da4e63a204b2be9f44de9b3d1049afaa18ae8e662d8424cd22cee08b873d06a3bdba98939a30ca9c00188ddf24d5786462ce8b978a36a17dc705ea087476ab30a2ecf34ac9144126cff72786386ec39c9c7d87b1a48e6e8a519e124b5d4c7375b36115cbf06f547c6bd3401c40d67a8bc28e196e516d7150f0eaf797a343526584bd0236283fc2589fa742853810435b1a35b2cd4ce2f3ca4ec3ee4d691999d5381284a713dbce73db2962c4f14ad92ba704d9268705a19b670f867ae1bb913369d88b85c88dd547fd7dc8", 0xf7}], 0x3, 0x7f, 0x7fffffff, 0x1) [ 2205.326774] FAULT_INJECTION: forcing a failure. [ 2205.326774] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.329339] CPU: 0 PID: 11881 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2205.330882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.332766] Call Trace: [ 2205.333358] dump_stack+0x107/0x167 [ 2205.334175] should_fail.cold+0x5/0xa [ 2205.335040] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2205.336184] should_failslab+0x5/0x20 [ 2205.337050] kmem_cache_alloc_trace+0x55/0x320 [ 2205.338065] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2205.339157] __io_uring_add_tctx_node+0x15c/0x520 [ 2205.340244] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2205.341438] __do_sys_io_uring_enter+0x146f/0x1890 [ 2205.342533] ? find_held_lock+0x2c/0x110 [ 2205.343447] ? io_submit_sqes+0x8610/0x8610 [ 2205.344447] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.345539] ? wait_for_completion_io+0x270/0x270 [ 2205.346616] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.347668] ? vfs_write+0x354/0xb10 [ 2205.348515] ? fput_many+0x2f/0x1a0 [ 2205.349333] ? ksys_write+0x1a9/0x260 [ 2205.350205] ? __ia32_sys_read+0xb0/0xb0 [ 2205.351128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.352316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.353474] do_syscall_64+0x33/0x40 [ 2205.354303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.355453] RIP: 0033:0x7fa8c8de3b19 [ 2205.356304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.360473] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.362183] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2205.363787] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2205.365403] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.367006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.368619] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:03:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:03:02 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:02 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x20041811}, 0x20000800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000100)=""/15, &(0x7f0000000400)=0xf) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) writev(r1, &(0x7f0000000540), 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x9, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000680)={'veth1_to_bond\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'virt_wifi0\x00'}) gettid() 00:03:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xffffffd8) clone3(&(0x7f0000000740)={0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {}, &(0x7f0000000540)=""/201, 0xc9, 0x0, &(0x7f0000000700)}, 0x58) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000007c0)={0x0, 0x81, 0x667, 0x0, 0x8}) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file2\x00', 0x8, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xb, 0x80000001) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7eb7ba0d4bcc55dd"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 00:03:02 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r5, &(0x7f0000000000)={0x400, 0x20, 0x10}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) [ 2205.461826] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:02 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:02 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2205.609907] FAULT_INJECTION: forcing a failure. [ 2205.609907] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.611482] CPU: 1 PID: 11902 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2205.612324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.613319] Call Trace: [ 2205.613646] dump_stack+0x107/0x167 [ 2205.614103] should_fail.cold+0x5/0xa [ 2205.614621] ? create_object.isra.0+0x3a/0xa20 [ 2205.615332] should_failslab+0x5/0x20 [ 2205.615903] kmem_cache_alloc+0x5b/0x310 [ 2205.616424] ? mark_held_locks+0x9e/0xe0 [ 2205.616928] create_object.isra.0+0x3a/0xa20 [ 2205.617449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.618051] kmem_cache_alloc_bulk+0x168/0x320 [ 2205.618607] io_submit_sqes+0x6fe6/0x8610 [ 2205.619110] ? __do_sys_io_uring_enter+0x6b2/0x1890 00:03:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2205.619711] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2205.620432] ? find_held_lock+0x2c/0x110 [ 2205.620916] ? io_submit_sqes+0x8610/0x8610 [ 2205.621426] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.621991] ? wait_for_completion_io+0x270/0x270 [ 2205.622553] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.623093] ? vfs_write+0x354/0xb10 [ 2205.623528] ? fput_many+0x2f/0x1a0 [ 2205.623953] ? ksys_write+0x1a9/0x260 [ 2205.624407] ? __ia32_sys_read+0xb0/0xb0 [ 2205.624882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.625494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.626093] do_syscall_64+0x33/0x40 [ 2205.626524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.627118] RIP: 0033:0x7ff4e8a17b19 [ 2205.627550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.629697] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.630586] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2205.631414] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2205.632266] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.633101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.633932] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:03:02 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x70, 0x0, 0x20, 0x0, 0x0, 0xe9a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001e00)=ANY=[@ANYBLOB="00f9ff00000000000100606e74a80fb646147dc85e0000000000000000000000010000000000000000000000000000000000000000000000000000000000eaff0200000003000000ffff00000000000009000000000000000600000000000000020000000000000000000000000000000000000000000000000000000000000000800000030000000200007f000000002a84000000000000fcffffffffffffff08000000000000000000000000000000000000000000000000000000c91d84c30000000000000000000000000000000000000000000000000000000000000000000000010000030000000000000000e2ffffff00000000000000000000000000bde386d63bcd07f198d746b9157e5bb66ca4c3317884d539c0cb07f043007f557265c48f3abbd9b04d2fa5c0cc6d215b3df4f3146623cc352833ca4e5c8a29f5293b66bbbbe1626566e7cb7f908feb74133e10edb36e004febd9bdd5666aba350b1e4871fe1d3d3163daea34319314168a0f52566e068efc69ae2467ed052113cc89ec6faa226f316174181770836d9ccf8467f3fcf34e54f752b6ee5868cbd58a1db6558002ff5d649ad2c97ac5b25884429d9b7e372a480cb61ddd873a2cbd146b69ba038acbfbfe843411c124e8d22947d62368d0a977d4bea46832dc2d0efb9675f96687f1c3417d7d49aeb8045c21ffc969cfb704e450fe462050ff80588979a1d69879903f989bae9dc2c599441721234a84652ebf4218b6e0ce32fe10c1fa4d5e170c515229628131de71197e7387ec2eab018be7b4c6a4f2dfe76b5f9d240033f8b3872484db4f182d9d1fba63d800978b3f9845123490549ea944cb838f11ae968ef87cf524c9079f60b9dc621518e0039ec3f20f717ae0b38da93bd3ec9ae808a142cb8af18cd4142038d6e34425d561b257f6997e38d6cae1d4686aa4653cc972bf37a717695ff75b5d6339832bd4c6806617b12ee49a7c46ebaeaa65bb855f07737fbaa23820c7bd4b39bd1004670e423225978303eda2925605f99878e938730db0af06a01f1b62978df8f674a4d50c7555cf9fae65afaeaa010f4afd9255b24bbe4ec176fe542a8529c9121d251dbee0db7821b01f11c9e46090d12803d0e6e6ecb02e84c99f53801bcb535f9fd3c23f5f9c905835b63416b4188c5370d53f4b02283b4fe5dd1112270152977e9133eb1290fc05d767a63e33e330d288ec3d2ad53b8186d4fac9c62d1dc71a3e893e05370ebff5e9063b9343404aac2f932ead92d886c8b0f21006ec2c95f221cf935d5ce2ab2f1f0d957649d95b4df223e6296a4f241e6fcb97dbcb727e02ab6615b79c9a22d4cea45f55f39230deca1a385e585e6402d4fcd1f86971fdcf03ef1cb4"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000a80)=""/4098, 0x1002}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x11b800, 0x40) pread64(r6, &(0x7f0000000180)=""/112, 0x70, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fallocate(r2, 0xbef847d84497334b, 0x7, 0x6) fcntl$setlease(r2, 0x400, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r7, 0x4, 0x2c00) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) 00:03:02 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:03:02 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2205.769006] FAULT_INJECTION: forcing a failure. [ 2205.769006] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.771656] CPU: 0 PID: 11911 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2205.773246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.775138] Call Trace: [ 2205.775742] dump_stack+0x107/0x167 [ 2205.776586] should_fail.cold+0x5/0xa [ 2205.777464] should_failslab+0x5/0x20 [ 2205.778329] kmem_cache_alloc_bulk+0x4b/0x320 [ 2205.779359] io_submit_sqes+0x6fe6/0x8610 [ 2205.780352] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2205.781491] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2205.782591] ? find_held_lock+0x2c/0x110 [ 2205.783528] ? io_submit_sqes+0x8610/0x8610 [ 2205.784533] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.785641] ? wait_for_completion_io+0x270/0x270 [ 2205.786746] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.787805] ? vfs_write+0x354/0xb10 [ 2205.788664] ? fput_many+0x2f/0x1a0 [ 2205.789497] ? ksys_write+0x1a9/0x260 [ 2205.790370] ? __ia32_sys_read+0xb0/0xb0 [ 2205.791308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.792519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.793701] do_syscall_64+0x33/0x40 [ 2205.794554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.795721] RIP: 0033:0x7fa8c8de3b19 [ 2205.796589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.800793] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.802542] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2205.804181] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2205.805824] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.807458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.809101] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2205.816450] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x4686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c12c1, 0x1a8, 0x13}, 0x18) fsetxattr$security_ima(r2, &(0x7f0000000140), &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xfb, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000a40)={{r2}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000600)={0x1, 0x1, 0x0, 0x8000, {0x22, 0x7, 0x1ff, 0x3ff, 0x5}, [0xf3]}}, @subvolid=0x9fc}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0xc, 0x0, 0x16, 0x11, 0xb, 0x6, 0x1, 0xae}) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x28, 0x18, 0x0, 0x9, 0x5, 0x18001, 0x1007, 0xc0, 0x1}) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x34, 0x0, 0x4, 0x4, 0x200000, 0x8f6, 0x40000}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000800)) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000240)={0x33, 0x29, 0x12, 0x15, 0x8, 0x4e6, 0x4, 0x159, 0x1}) 00:03:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x697f6593021470a1) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x13, r0, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000500)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x477cb803dff78602, {0x0, r2}}, 0x8) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESDEC=r2]) r3 = socket$inet(0x2, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) r6 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x4, 0x5, &(0x7f0000000400)=[{&(0x7f0000000180)="542d965ec3e066e8", 0x8, 0x1}, {&(0x7f00000001c0)="468385d4abd70334de40d03eca72f3fb1e186df4c404840463650f02994636b1c5e6de5f951272a80309a84b8ea3a80e10e2959acebbbfb7007d0a9f73", 0x3d, 0x8}, {&(0x7f0000000200)="56f09fc75868ea2882fd4298ce8b64914a6ffb46e136fa27afd75266ebb51b37bd8275e456a4dfad58abb7781d6f63d350b4cb1c507fadc53bd00d9723197d998bf47e88288ef1a931a2139cee", 0x4d, 0x80}, {&(0x7f0000000280)="1c0b97c7cb949979eccf2806b93b31ce63ea102cecca9efdad47ca9ac1972cd5ef8d739b31acf293f1d8eb981ac3d7c8226282d1eb0cc0fec9acccbb3d6418ae32d9cba3b3c52c047edf124d0e52a466a782e4f38f79a487f9fc1b8b3945b0d8bf3754ef0d7f8257602d7c9114394843a7c5490c441e6c82c9d7bd4af8cfbc02a12ae0d5366cb566ef762296a5658953c17ac42cbd8da18d9453d1dec83d10834e02004b21852283fe353f0cffd8cf43046d0b56010f177af9a8aa255ab47f39039d5f5b9d3a4b9467e9fb6bd210c65bbb40aa337a04da5ec43f8669da05c234c3efd582681521a2ca2880787a33ab53045f73dda377ed7f", 0xf8, 0x1000}, {&(0x7f0000000380)="36a7b24c7c7dee81339659373db8af1a2dea967ab12d4d8ec3a9ea4c6c2c3a33dc34498af549c4b311e0dcd9b551525fc5b9b14c08639692eb5c45860b85a97ee8f3d15f00163bd9261aee8acbd7dcf1dcbcda7bfbf9fb978683ed67c449f69ac282eb4842d0f497153d8747378846cf4fc11d864704b45bfcd48b1b4501eef7", 0x80, 0x2}], 0x20000, &(0x7f0000000480)=ANY=[@ANYBLOB='#)\']#]{,*)!5,,permit_diructio,pcr=00000000000000000054,permit_directio,pcr=00000000000000000001,\x00']) dup3(r5, r6, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r4, r0, 0x0, 0x4000007ffffffc) [ 2205.895276] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:21 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x6, 0x4) r1 = signalfd4(r0, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000000c0)={0xee, {{0xa, 0x4e21, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}}, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1a5}}}, 0x108) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 00:03:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01aa0000ff0f000400000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:03:21 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x70, 0x0, 0x20, 0x0, 0x0, 0xe9a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000a80)=""/4098, 0x1002}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x11b800, 0x40) pread64(r6, &(0x7f0000000180)=""/112, 0x70, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fallocate(r2, 0xbef847d84497334b, 0x7, 0x6) fcntl$setlease(r2, 0x400, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r7, 0x4, 0x2c00) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) 00:03:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:03:21 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:21 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:03:21 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:21 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x5, 0x8000}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8917, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x0, @empty}}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) [ 2225.229519] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2225.233600] FAULT_INJECTION: forcing a failure. [ 2225.233600] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.237713] CPU: 0 PID: 11956 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2225.239884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.242482] Call Trace: [ 2225.243313] dump_stack+0x107/0x167 [ 2225.244465] should_fail.cold+0x5/0xa [ 2225.245683] ? xas_alloc+0x336/0x440 [ 2225.246863] should_failslab+0x5/0x20 [ 2225.248057] kmem_cache_alloc+0x5b/0x310 [ 2225.249347] ? stack_trace_consume_entry+0x160/0x160 [ 2225.250954] xas_alloc+0x336/0x440 [ 2225.252083] xas_create+0x34a/0x10d0 [ 2225.253296] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2225.254953] xas_store+0x8c/0x1c40 [ 2225.256116] __xa_store+0x164/0x2d0 [ 2225.257284] ? xa_delete_node+0x280/0x280 [ 2225.258612] ? trace_hardirqs_on+0x5b/0x180 [ 2225.259987] xa_store+0x31/0x50 [ 2225.261050] __io_uring_add_tctx_node+0x1cf/0x520 [ 2225.262588] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2225.264269] __do_sys_io_uring_enter+0x146f/0x1890 [ 2225.265780] ? find_held_lock+0x2c/0x110 [ 2225.266950] ? io_submit_sqes+0x8610/0x8610 [ 2225.268192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2225.269591] ? wait_for_completion_io+0x270/0x270 [ 2225.270961] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.272271] ? vfs_write+0x354/0xb10 [ 2225.273393] ? fput_many+0x2f/0x1a0 [ 2225.274428] ? ksys_write+0x1a9/0x260 [ 2225.275510] ? __ia32_sys_read+0xb0/0xb0 [ 2225.276672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2225.278170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.279747] do_syscall_64+0x33/0x40 [ 2225.280807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2225.282297] RIP: 0033:0x7fa8c8de3b19 [ 2225.283375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.288827] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2225.291188] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2225.293393] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2225.295593] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.297781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.299975] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 [ 2225.368191] FAULT_INJECTION: forcing a failure. [ 2225.368191] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.372011] CPU: 0 PID: 11955 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2225.374142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.376666] Call Trace: [ 2225.377487] dump_stack+0x107/0x167 [ 2225.378609] should_fail.cold+0x5/0xa [ 2225.379913] ? create_object.isra.0+0x3a/0xa20 [ 2225.381367] should_failslab+0x5/0x20 [ 2225.382559] kmem_cache_alloc+0x5b/0x310 [ 2225.383837] ? mark_held_locks+0x9e/0xe0 [ 2225.385140] create_object.isra.0+0x3a/0xa20 [ 2225.385677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2225.386306] kmem_cache_alloc_bulk+0x168/0x320 [ 2225.386869] io_submit_sqes+0x6fe6/0x8610 [ 2225.387397] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2225.388001] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2225.388589] ? find_held_lock+0x2c/0x110 [ 2225.389100] ? io_submit_sqes+0x8610/0x8610 [ 2225.389637] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2225.390254] ? wait_for_completion_io+0x270/0x270 [ 2225.390845] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.391409] ? vfs_write+0x354/0xb10 [ 2225.391866] ? fput_many+0x2f/0x1a0 [ 2225.392312] ? ksys_write+0x1a9/0x260 [ 2225.392774] ? __ia32_sys_read+0xb0/0xb0 [ 2225.393283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2225.393951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2225.394583] do_syscall_64+0x33/0x40 [ 2225.395040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2225.395668] RIP: 0033:0x7ff4e8a17b19 [ 2225.396117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.398369] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2225.399298] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2225.400170] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2225.401049] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.401947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.402811] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:03:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:03:22 executing program 2: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x0) r2 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="c15c853345d947326f0e994492ba7f1da03d0b7f2519e6abd6325b86f8106c917d72704e55fcbae718c2b862073285ce60ba4dbbad6788c2054619a93ceea66ee3fbfc4c0505d20459073efb6856935dfe28e7618736e3605dc8326e9cb6981497e70df7e1333290528e409d688d0261467dc1014791f28dfc3a9295343a9ed5da0448c9cddf178ed2ae7fced13f12de50221b9cd647d020ca4426ef99a9985ae9beef3dc2bbe33291eb44a1f9a222f5b89f83ad7f7a9fac3160f8e743442c470390cb567f4b67f75e2c145381d43b201f00", 0xd2, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000002c0)="ca03e7704267d20a3170cde55be7d728a25ce170640ab4c0082a960f25b522ea6ba77041dd24ce5b0426092de3912a1383d6c28c654776381a83fc73322ffd15969cceefcefcdbbfb617a51d597fd7405fd8c34a76e831fa7fbe985a33200599d3b71f73da4aa97453efcb3367d5f2a9b21b056f07bdd4a5f7b04af4e53b39e291ad", 0x82, r2) keyctl$KEYCTL_MOVE(0x1e, r3, r1, r0, 0x1) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffc, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r4, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r7 = socket$inet(0x2, 0xa, 0x0) socket$inet(0x2, 0x2, 0x5) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:03:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x74d8, &(0x7f0000000200)={0x0, 0x7e40, 0x0, 0x2, 0x39, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1c", 0xa}], 0x1}, 0x0, 0x24004015}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000000c0)=0x7, 0x4) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = socket(0x8, 0x5, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r9, @ANYBLOB="7800002000000007000000064f0a00bc006500000529907800000000e0000001443411a1e0000001000000077f000001800000000000000000000000ac1e010104000000e000000100000800640101010000000301440c7223e0000001fffffeff44040d604414ef00000000ff000000080000080000000103440b7bdb17bfe0000002ac1e0101e0000001000000007f00000194040100018625000000020208fb020a7af6ec06089698fa534451070fd6ec85a99872b29509a0004d47000000"]}) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:22 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x70, 0x0, 0x20, 0x0, 0x0, 0xe9a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000a80)=""/4098, 0x1002}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x11b800, 0x40) pread64(r6, &(0x7f0000000180)=""/112, 0x70, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fallocate(r2, 0xbef847d84497334b, 0x7, 0x6) fcntl$setlease(r2, 0x400, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r7, 0x4, 0x2c00) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) 00:03:22 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2225.626472] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:39 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:03:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x10480, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r1, 0x0, 0x4000007ffffffc) 00:03:39 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x70, 0x0, 0x20, 0x0, 0x0, 0xe9a, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001e00)=ANY=[@ANYBLOB="00f9ff00000000000100606e74a80fb646147dc85e0000000000000000000000010000000000000000000000000000000000000000000000000000000000eaff0200000003000000ffff00000000000009000000000000000600000000000000020000000000000000000000000000000000000000000000000000000000000000800000030000000200007f000000002a84000000000000fcffffffffffffff08000000000000000000000000000000000000000000000000000000c91d84c30000000000000000000000000000000000000000000000000000000000000000000000010000030000000000000000e2ffffff00000000000000000000000000bde386d63bcd07f198d746b9157e5bb66ca4c3317884d539c0cb07f043007f557265c48f3abbd9b04d2fa5c0cc6d215b3df4f3146623cc352833ca4e5c8a29f5293b66bbbbe1626566e7cb7f908feb74133e10edb36e004febd9bdd5666aba350b1e4871fe1d3d3163daea34319314168a0f52566e068efc69ae2467ed052113cc89ec6faa226f316174181770836d9ccf8467f3fcf34e54f752b6ee5868cbd58a1db6558002ff5d649ad2c97ac5b25884429d9b7e372a480cb61ddd873a2cbd146b69ba038acbfbfe843411c124e8d22947d62368d0a977d4bea46832dc2d0efb9675f96687f1c3417d7d49aeb8045c21ffc969cfb704e450fe462050ff80588979a1d69879903f989bae9dc2c599441721234a84652ebf4218b6e0ce32fe10c1fa4d5e170c515229628131de71197e7387ec2eab018be7b4c6a4f2dfe76b5f9d240033f8b3872484db4f182d9d1fba63d800978b3f9845123490549ea944cb838f11ae968ef87cf524c9079f60b9dc621518e0039ec3f20f717ae0b38da93bd3ec9ae808a142cb8af18cd4142038d6e34425d561b257f6997e38d6cae1d4686aa4653cc972bf37a717695ff75b5d6339832bd4c6806617b12ee49a7c46ebaeaa65bb855f07737fbaa23820c7bd4b39bd1004670e423225978303eda2925605f99878e938730db0af06a01f1b62978df8f674a4d50c7555cf9fae65afaeaa010f4afd9255b24bbe4ec176fe542a8529c9121d251dbee0db7821b01f11c9e46090d12803d0e6e6ecb02e84c99f53801bcb535f9fd3c23f5f9c905835b63416b4188c5370d53f4b02283b4fe5dd1112270152977e9133eb1290fc05d767a63e33e330d288ec3d2ad53b8186d4fac9c62d1dc71a3e893e05370ebff5e9063b9343404aac2f932ead92d886c8b0f21006ec2c95f221cf935d5ce2ab2f1f0d957649d95b4df223e6296a4f241e6fcb97dbcb727e02ab6615b79c9a22d4cea45f55f39230deca1a385e585e6402d4fcd1f86971fdcf03ef1cb4"]) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000a80)=""/4098, 0x1002}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000080)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x11b800, 0x40) pread64(r6, &(0x7f0000000180)=""/112, 0x70, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fallocate(r2, 0xbef847d84497334b, 0x7, 0x6) fcntl$setlease(r2, 0x400, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$setstatus(r7, 0x4, 0x2c00) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) 00:03:39 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:03:39 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:03:39 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x7, 0x7, &(0x7f0000000900)=[{&(0x7f0000000500)="7d6ce0e9700471de219752afa4316b53fbe1a5387539d200fa67de403b0ed51db548871f3ae7a2eecc8f26542a3b3fc25cc483858746db333238d59dfc2d878f8aa6fec99112159157e4a8ea48b5850e0b202f7aeabeb698e9cbb4811b20dbea3ee8fd17f45c01f5faeef13a523402bb5102dda110c93b9029ba0a4e6427df1feb0b40feea27152ffc9ae4f8b45d25c1d15f9bd6aff070407b619e2d49981477db1eb73bfe34146b85272aadd6efea46f12fb9df95354d1b2a2e3401dfd6e2ee5dd282f0ff23229ec17614aa3e572a14bc7f1098145cbddded5fe0c4eb8a4738b0fbe6a214effb294d99d74c68117fcfe608dee8dc4d52ea", 0xf8, 0x9}, {&(0x7f0000000600)="649544e1c1bf8f2bf2ec4da6ca8b288332f8b829e5db885183aebfa0e3a5b75a4a5197f394640300318298782957b39d7972660147e2e2ab05199ec04055a03a7c7b5ddd1f956240bf86f13ec50db57cfcd539c2ed6fad7a98250c8a44591bb508229f35d619348606fd87d4cc89df0624d1310bd356152a02c212d2a90d694d06b064091683f8743aba06a5ead8483f76b60b28bba66d9edccd4ca85b2754256899ef0cd27913752e82d9f5504fcedfc9e5681dc1401abead3ae5dea67a85daca3a989b9dae8668f019a50a2d2145b1dde6bdc17faaacbcb7036d231b3956fdce9ecf0df3123f1e95b83344fdee373db4", 0xf1, 0xa213}, {&(0x7f0000000700)="88741f73140d09601a9d404854f573e5da4f931c4497fa24775abae26f43d52d02e6159f7408e53ed37e4e3be78d4fbfed2af105842bd17caf639bc0c81c12dab6f63c8debc2031e1a2a73df33aacd3011fe8c45c6a6a630338a5a1e56d8c1341d2318aef969b62332f1e18c9b2f78bb2f75c56fb1eac7d8ab0feb34806ddbc80fdb5ffcbb6c595146bbf803f691e967fde44c2caacb34e9905d5f2ba7738fa4a1175fd7ca1db5d5b9cdbbfff6c17536f110ac633188c96af69130ac5ff9375a10", 0xc1, 0x5}, {&(0x7f0000000400)="121d4210b99b2b1f30da7c402bcc183aab66e91791aa24f36e5401649de927bcaba6c0dcb952e766d7785e18cf2d3aa6bde3837f9af657608e9502af18d2ebd6dfef4ee225ea81a298775e656543c6e9f64fea5b72832975c4b1328179171aeb249b7d59a3e657806b59102a5bf3187d532f3c2b28466e13ab787229b67f1173", 0x80, 0x6c2c}, {&(0x7f0000000800)="0b73f4a0ebfb677d5dd82298f22768f0f0db0b8867f0c2b64c0ba47e8cbf46a74ba6b2929cffbb43643a5bd05b61e6cf10c048dd5b3cae101db719e6051fc378d86f226ea0332867fe1d945229bd9e1fc9a807a8537ef29e1eb298b155b157945cad03dfa34467485324034bb9900cc5b485d0bea083", 0x76, 0x9}, {&(0x7f0000000380)="e4f0774f", 0x4, 0x8750}, {&(0x7f0000000880)="d52d9a2883f08fd62fbea3db24d198500ecbb794771ba811e26219459da905fb428d2b9ec7b2be3a0c20d159b20273eca7af5c75cc9481f0ad17faadfb1c0bc8271c1d5128a0fede64977cb8da75188e57970a63106737d89995d157355c110973bac256dfc92b010c90924ed1", 0x6d, 0x2}], 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6a6f6c6965742c6d61703d61636f734d2c686964652c757466382c6d61703d6f66662c6f626a5f747970653d30303030303050639b724088cba6089ba8eb303030303030300f300000000000002c686173682c726f6f05006f6e746578743d726f6f742c646566638dc56427129426f3e4839c6f6e746578dcded810f4f774cd"]) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) fallocate(r1, 0xb, 0x6, 0x9ea8716) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x100, 0x166) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3, 0x1f, 0x1f, 0x2, 0x3, 0x3, 0x5, 0x1f0, 0x40, 0xd0, 0x2, 0x8, 0x38, 0x2, 0x2, 0x8000, 0x4}, [{0x7, 0x8, 0x1, 0x0, 0x0, 0xffffffff, 0x3f, 0x1}, {0x2, 0x20, 0x5, 0x0, 0x8, 0x9, 0x3, 0xffffffff}], "85905fadf298330d942b4e7206dd5e5542eba82361ce97a86796d8258a816b0f8990b6fd0cd0b5acb29fe8cbe2"}, 0xdd) setxattr$incfs_id(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000003c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7ffffff9) [ 2242.778823] FAULT_INJECTION: forcing a failure. [ 2242.778823] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.781889] CPU: 1 PID: 11996 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2242.783352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.785093] Call Trace: [ 2242.785661] dump_stack+0x107/0x167 [ 2242.786429] should_fail.cold+0x5/0xa [ 2242.787237] ? create_object.isra.0+0x3a/0xa20 [ 2242.788206] should_failslab+0x5/0x20 [ 2242.789008] kmem_cache_alloc+0x5b/0x310 [ 2242.789878] ? mark_held_locks+0x9e/0xe0 [ 2242.790745] create_object.isra.0+0x3a/0xa20 [ 2242.791669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2242.792728] kmem_cache_alloc_bulk+0x168/0x320 [ 2242.793705] io_submit_sqes+0x6fe6/0x8610 [ 2242.794602] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2242.795640] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2242.796662] ? find_held_lock+0x2c/0x110 [ 2242.797509] ? io_submit_sqes+0x8610/0x8610 [ 2242.798436] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2242.798767] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2242.799451] ? wait_for_completion_io+0x270/0x270 [ 2242.802378] ? rcu_read_lock_any_held+0x75/0xa0 [ 2242.803350] ? vfs_write+0x354/0xb10 [ 2242.804122] ? fput_many+0x2f/0x1a0 [ 2242.804884] ? ksys_write+0x1a9/0x260 [ 2242.805688] ? __ia32_sys_read+0xb0/0xb0 [ 2242.806543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2242.807627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2242.808700] do_syscall_64+0x33/0x40 [ 2242.809471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2242.810539] RIP: 0033:0x7ff4e8a17b19 [ 2242.811316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.815120] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2242.816700] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2242.818200] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2242.819693] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.821181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2242.822683] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:03:39 executing program 6: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r1, &(0x7f00000002c0)=""/225, 0xe1) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x1274, 0x0) r4 = dup2(r0, r0) r5 = syz_io_uring_complete(0x0) r6 = io_uring_setup(0x61ba, &(0x7f00000003c0)={0x0, 0x149a, 0x8, 0x1, 0x173, 0x0, r1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018cf8297613cf2262b8f5e95d17e000000", @ANYRES32=r6, @ANYBLOB="010000dc01000000000000696c653000"]) write$binfmt_elf64(r4, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x3c7) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, r4, r0, r7, 0xffffffffffffffff, r8, r0], 0x8) clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 00:03:39 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x1, 0x5) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'bond0\x00', {0x2, 0x0, @empty}}) [ 2242.874897] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:03:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2242.918254] FAULT_INJECTION: forcing a failure. [ 2242.918254] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.920970] CPU: 1 PID: 12015 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2242.922719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2242.924717] Call Trace: [ 2242.925361] dump_stack+0x107/0x167 [ 2242.926147] should_fail.cold+0x5/0xa [ 2242.926966] ? create_object.isra.0+0x3a/0xa20 [ 2242.928069] should_failslab+0x5/0x20 [ 2242.929017] kmem_cache_alloc+0x5b/0x310 [ 2242.929987] create_object.isra.0+0x3a/0xa20 [ 2242.931153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2242.932311] kmem_cache_alloc+0x159/0x310 [ 2242.933225] xas_alloc+0x336/0x440 [ 2242.934004] xas_create+0x34a/0x10d0 [ 2242.934815] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2242.935929] xas_store+0x8c/0x1c40 [ 2242.936697] __xa_store+0x164/0x2d0 [ 2242.937477] ? xa_delete_node+0x280/0x280 [ 2242.938370] ? trace_hardirqs_on+0x5b/0x180 [ 2242.939293] xa_store+0x31/0x50 [ 2242.940152] __io_uring_add_tctx_node+0x1cf/0x520 [ 2242.941227] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2242.942453] __do_sys_io_uring_enter+0x146f/0x1890 [ 2242.943814] ? find_held_lock+0x2c/0x110 [ 2242.944851] ? io_submit_sqes+0x8610/0x8610 [ 2242.945917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2242.947221] ? wait_for_completion_io+0x270/0x270 [ 2242.948375] ? rcu_read_lock_any_held+0x75/0xa0 [ 2242.949510] ? vfs_write+0x354/0xb10 [ 2242.950307] ? fput_many+0x2f/0x1a0 [ 2242.951245] ? ksys_write+0x1a9/0x260 [ 2242.952233] ? __ia32_sys_read+0xb0/0xb0 [ 2242.953301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2242.954754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2242.956017] do_syscall_64+0x33/0x40 [ 2242.957055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2242.958447] RIP: 0033:0x7fa8c8de3b19 [ 2242.959378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2242.963737] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2242.965686] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2242.967205] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2242.968699] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.970203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2242.971704] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:03:39 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2243.023018] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2243.095451] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:39 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2243.254103] FAULT_INJECTION: forcing a failure. [ 2243.254103] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.256824] CPU: 1 PID: 12037 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2243.258292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.260042] Call Trace: [ 2243.260604] dump_stack+0x107/0x167 [ 2243.261371] should_fail.cold+0x5/0xa [ 2243.262189] ? create_object.isra.0+0x3a/0xa20 00:03:39 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2243.263160] should_failslab+0x5/0x20 [ 2243.264110] kmem_cache_alloc+0x5b/0x310 [ 2243.264972] ? mark_held_locks+0x9e/0xe0 [ 2243.265840] create_object.isra.0+0x3a/0xa20 [ 2243.266777] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2243.267849] kmem_cache_alloc_bulk+0x168/0x320 [ 2243.268822] io_submit_sqes+0x6fe6/0x8610 [ 2243.269739] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2243.270779] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2243.271805] ? find_held_lock+0x2c/0x110 [ 2243.272664] ? io_submit_sqes+0x8610/0x8610 [ 2243.273588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2243.274614] ? wait_for_completion_io+0x270/0x270 [ 2243.275626] ? rcu_read_lock_any_held+0x75/0xa0 [ 2243.276605] ? vfs_write+0x354/0xb10 [ 2243.277385] ? fput_many+0x2f/0x1a0 [ 2243.278179] ? ksys_write+0x1a9/0x260 [ 2243.278982] ? __ia32_sys_read+0xb0/0xb0 [ 2243.279845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.280940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2243.282028] do_syscall_64+0x33/0x40 [ 2243.282808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2243.283881] RIP: 0033:0x7ff4e8a17b19 [ 2243.284673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.288553] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2243.290169] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2243.291661] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2243.293161] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.294677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2243.296174] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:03:40 executing program 7: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000b40)="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", 0x1000, 0xfffffffffffffff9) r2 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) syz_io_uring_setup(0x561e, &(0x7f00000002c0)={0x0, 0xef60, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)="ba79c3ef145251211a1cc548becedb7abd811b28be031d512e0f1c16150bbafc24f20658b7cfd98d975277b6a763215846c397fb29ed95ff0bcebef63d3a4f19e33072f68025cfb1d5db8ad1f1b9221c776164a71d861570eb716779450adb7529", 0x61, r0) r7 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffc, r7, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r7) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)="147d67261cae98379795b7a342e7aa459b5a1691a340fac75881de8b320f483ecb75cb6119385833bbddc0a12337ab36c6921cbdf9b0dd6db7", 0x39, 0x810, 0x1}, 0xbb2) 00:03:40 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:03:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2243.466244] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2243.494246] FAULT_INJECTION: forcing a failure. [ 2243.494246] name failslab, interval 1, probability 0, space 0, times 0 [ 2243.497265] CPU: 1 PID: 12052 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2243.498680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2243.500371] Call Trace: [ 2243.500927] dump_stack+0x107/0x167 [ 2243.501692] should_fail.cold+0x5/0xa [ 2243.502470] ? create_object.isra.0+0x3a/0xa20 [ 2243.503404] ? create_object.isra.0+0x3a/0xa20 [ 2243.504338] should_failslab+0x5/0x20 [ 2243.505110] kmem_cache_alloc+0x5b/0x310 [ 2243.505952] ? mark_held_locks+0x9e/0xe0 [ 2243.506787] create_object.isra.0+0x3a/0xa20 [ 2243.507675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2243.508699] kmem_cache_alloc_bulk+0x168/0x320 [ 2243.509621] io_submit_sqes+0x6fe6/0x8610 [ 2243.510548] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2243.511553] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2243.512539] ? find_held_lock+0x2c/0x110 [ 2243.513381] ? io_submit_sqes+0x8610/0x8610 [ 2243.514274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2243.515247] ? wait_for_completion_io+0x270/0x270 [ 2243.516220] ? rcu_read_lock_any_held+0x75/0xa0 [ 2243.517151] ? vfs_write+0x354/0xb10 [ 2243.517928] ? fput_many+0x2f/0x1a0 [ 2243.518666] ? ksys_write+0x1a9/0x260 [ 2243.519430] ? __ia32_sys_read+0xb0/0xb0 [ 2243.520262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2243.521322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2243.522382] do_syscall_64+0x33/0x40 [ 2243.523130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2243.524164] RIP: 0033:0x7fa8c8de3b19 [ 2243.524910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2243.528631] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2243.530167] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2243.531611] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2243.533054] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.534501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2243.535918] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2243.564968] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:56 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="080f0000001400002e2f66696c653000"]) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = syz_io_uring_setup(0x3875, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r8 = dup2(r4, r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r9 = fsmount(r8, 0x1, 0x75) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) r10 = pidfd_getfd(r9, 0xffffffffffffffff, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r11, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41010}, 0x20000800) [ 2259.938688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2259.960832] FAULT_INJECTION: forcing a failure. [ 2259.960832] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.963090] CPU: 1 PID: 12076 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2259.964115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.965367] Call Trace: [ 2259.965777] dump_stack+0x107/0x167 00:03:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x8d4, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x13e, 0x33, @mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @initial, {0xa, 0x8}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x38}, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0x7ff, 0x3, 0x0, 0x2}, 0x300, 0x0, 0x1}}, @void, [{0xdd, 0xf9, "152015ac40570026cdd78b2e3f53f82061fe663cbf7ca8e418c08c16b18a8acea1571c5b542984d52cd9cd49d328e5f009da436fdaf678f7592b3b821b49b7ed49ba873d617574c332f8713d3fa9d7cbf918ee139f0e1bac5cb587269f7a3eb2ed9029a0e43c2dd72a139edd33051c58942a1c4e0ccce9f62ea6a665e2d5a7d7b43f108aa90a71569d84f256168386050c8ae08de44710f28f4ac6135bb3e36c7676d1264feaf63f396af8056fd5c5c1d9455b689fad44fec7c34d0c3ae3d459d78785a335233b5725f2745f5b155b1b003162ca6d0f789ad6e3285d7bfccba0a9eb20daf4331ab45c6a40b8815ea9fc98a1fd8142adf7e778"}]}}, @NL80211_ATTR_FRAME={0x360, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x70}, @broadcast, @random="840967bc8899"}, {0x7, 0x1, 0x2, 0x0, 0xff}}, {@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@device_b, {0x0, 0x7}}, {0x9, 0x1, 0x3, 0x1, 0x40}}}, @a_msdu=[{@broadcast, @device_b, 0x51, "6fd93f9a5930080d78ae420c03724d2ab0fc468c0a509d50edc19844d28f4d9acfc75b37c35022d8370f7f5c0dd3a646e07ff245877e3228a77badd203fca3d3f64735db576fce3fce68aee8cbf0993716"}, {@device_b, @device_b, 0xb9, "1b231c73d7b145ce4c55261a9d2e6043cb61a9f8025b10c16fd4f093d896e24d9864587693b7d68ec79d5ea8d1f7633d4ad441745272ece373dd56214779f0f025efd6d934865806d4f309dc8df792b713f42dd2a197801633b71284582673adb3ac743b72ebf586b8a9f7762e50cdfb87a4a1af56e174531c47d31f850487b24f0a092c908ca7d2ffb6351df9751335180e085b6c79759f259e7e5779b116cad761ec7d8ba14f8044877e0d12878a81ff1bd0ea0819e5f400"}, {@broadcast, @broadcast, 0x2d, "aef93e24b9d464c932a2ec8bdd9d8d6f2cef8cca2818d5372105946af363f27786cf1d0bcf66b525c1f0a84d1e"}, {@device_a, @device_a, 0xd0, "3089a47f4500a0291a7f29d803d115683bb6de315db275fc27a47da38c43776109061a5bad42a94b3d221ae8f3e389c8e378a5a8c0c6a81cfc53a84a6a5f1c8682bc9faf9c852b35e9dcf87aa802592eaa5a4cdb4b369b4a5e6fa8f6ca339acae5590a8b359fc61088329d05742ef513f9c1ec154a40b2d844f96c342aa8733543d5a4ec0eb6a6ab8323a06bd9298c3533b861bd231ae3f10c76595393d3562981d31371e918256db2a5deba48ec31cb03aec058d7a1eeebd3bd2a8c916771ca89e934434df5c083772d9faec561cfd7"}, {@device_a, @broadcast, 0xd4, "2ef6d9cfff1f543edd82ba0f41b6f0d58fb2f5ddf145a9d3775054b075cc69cf6e27acba6c0541c6beefe2fa554f81e365de63880f711b21d85da82c585fc5f3fbc1f19f6bee03179e2b4571492f8d7469b5e749515579e9184ec8fe59f3dcf4f1143898d8f1e2432ba6daebbbb0b5281cd47bc34233273cb0e79bb8ab641a5d6f8927d8bcd340af8359c9fcea28b58a33018be39585759c06edb5ee01cce13c7b6d1366ae4c3b33d571c075a3b9ef705a0121ac358d45ca0df60b999c4c37a3e4446d48e2cb71633d66d60a752db4300ffd56cf"}]}}, @NL80211_ATTR_FRAME={0x3fe, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @device_a, {0x8, 0x9}}, @a_msdu=[{@broadcast, @broadcast, 0x82, "1221a21ea558c590d1c4196d477c7c62b2ac120f3f1ee6ac6962b9d039e2450d4c4b38c37ef2dd89c644e6d2db2233e623ea061d83a3ac595cc3fd4268dfd8f0c1ecec8857f5444d2484950303f23e9b58d4d52ef30759453d54c9820cb12b121acd03cb54d4bbb176f7f68b166a4eddc4241061c8e73e8018255c2ba91bfd98a3a7"}, {@device_b, @broadcast, 0xc5, "eb9580da1b8568ff2f2930603912b81468f6bb095d7a24e5c6ab358097401ebd9e55381a4b79b51977fe755480f7a5e79379c8384ce9bdcf1a2d4a415c7374bd6b1131575179eacb5a5cc6785962d5664ea8d422e3e2e7bd52a72cfdc1f699a7ee9d06ac46cba2a230fc1b101a6c2b253a58fb1bea335dd4edff9cccda7df78ac89110dc815b149e3a8e897af6b178afef11a4d88a565fa2e915588acd572b4fb2b0172311a8dad030e10975c455e564a712b0782920d1e3b65d508ab5e2e572837ce567d7"}, {@broadcast, @device_a, 0xbf, "c00c40c73577ff5c653a86d893a533794a197f026a58adf6b32132517ad8d8cc86d2449112c49eabcc47776e7c49b166d4962c82a044e7ad7085221ea5dcef380f9505ac753d0b5ddeaf6890ef1de7797b85da232b06dc6750afe5516b391e5f832663db6bc5978910e8d074958a953b40a87cbda78c824b252c53a95847f7f3e91e810cf7cd8667fb5a0cdcacec573ef24bedf669c21b3daaa104205d55d0b8567938f5cb0b686341bf9bb726a4c4dc32a855e5792131d3f447538e18a142"}, {@device_b, @device_b, 0x3e, "3eba5e61d2073e90b26b12f509f1211cc2353b2b076a512182987f9c49d1daf58032cf9471e2988501ff92f2d4c74bf87659f9891f10d51f58624d5ce2cc"}, {@broadcast, @device_b, 0x43, "cafe411d61925f18e8d462dfb1998cc549c476d3810254f557e08b5a589de917c110af845a1596882424054a51376e9b8be2929f229aa1626c9c6df219cf2ffaa1aaaa"}, {@device_b, @device_a, 0xf7, "959ddc2498edfbf0c2628ff2e1b25ace8a76bb4fa978e27c70443130d2bb977d7e53ec634e7b37961c3c8e7f9cff3bc2734fba4ca27164fc28a4a8a850d66fa7f1eb9ef57ef593d1e362074217e075dcdc15879e2b5ea50ad1b9d746071b290524000638edb957b26960a07e8c3851d19ea23931b29ffacc0d9bf90c4031115d32cf8c773edbb2fb266f922a58b77a7dc56ebb814b84f12883e4ff2a4e34093fea26c94793d08f28206c9a1d286328a42f8f0de4e1b8239c9451843bfa097c2d504df8afa7714f3d3dd5dadbc278753099a7724f589129487cd7ee9d002ae1a53e0ab06b59b184ed9bc7d934c02c35e6c7692e99ca9f36"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x8d4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) r4 = eventfd(0x0) dup2(r4, r0) 00:03:56 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:03:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f00000015c0)="c4844cc60fafa96725cb55299ed06962548c4e49683b426806a7a1326f53d09f3a904a709fe037388e5822fb621375d3021a01340133630d4c3381797650c5d3659a9fba1ec09dd7800e2b21e92a3a48881c0c69b9d2186a15349dfad11bcad75171f9e7d685c9cb373ef1dd5f9bc2943fe8bc6307c5b667b8f95690cfe7cc67d46fadb11ee30fcfd76ed073d80b79f431caf7715a0d5f1f9271a4bf1fbdb048de6386699dc95df86a69dd855def20845aa9c154b50d91", 0xb7, 0x7, 0x0, 0x3}, &(0x7f0000001680)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001880)=ANY=[@ANYBLOB="01050040ddffffffffffffffd744b301c3124816a2c4ae9c751d73ee24164aa778ba9eacc3aff6765c48b726a30efc6b637b3d427e89f4f3e1b656774aebba16f314e87d67101b67c346ada0fc24223786f32a2223d0e0689c6b193a54a43deb28d338ce074d4b2b82d3200e0f3b9d4e4cc5c638a4eaff01be4e665344e56409b65290f884ca4a1aa3919860b4856340bba2e30ebbae5ac96d3e375cd35ddaa7d3cc7db081e75d14f41b22b46275934003c7016f2a", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65322f66696c6530003a4f65abea57dc314ea2051f40085f96ac1751ba7eb69da9294156d447e2377a2863fc5e53827de66b092de2ae41c227c85b8d32449eb4afa0968fb5cc84779ddbe4da84f3820685f9469b2fca6c24396b266af0a13e0e9affc64d92d232b674e0ef594476fdd753d1648050a484f1d54acd04e5396094d43036d618a6a9aeddc0dc111dfd354a752c49fadb7b9828e48135eaa7aa4761462a091120641c2f4e9be7238be0b83024db98a98055fefc64381a7e7c0fda4843cf023c81b55a42e6d69040234d2262bbbe0b46b9de0ba6d2ceef34945ad3c4fa0000000000"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0, 0x149) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a40)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000000054c9b21f0000aceb931ea77e10da6c1833ecb1605ae10f151f2a0cbed882af65b88831055efb4de7f9f9cdf5dc9c29f2c43f69838ba5eb270d9e702a6161876c5e000000000000020077141c46f8b44e58f9d6f0b6e49a38c594f2b4d124858b05399b8806854f30715bf56e80440b83043f0fcfcb4d323e6649d9", @ANYRES32=r2, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}}, 0x4001) preadv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/10, 0xa}, {&(0x7f0000001480)=""/177, 0xb1}], 0x6, 0x5559, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001700210c0000cc9ac348ff5bf3b4281f9c43980000fbd5df"], 0x1c}, 0x1, 0x0, 0x0, 0x50880}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r3, 0x0, 0x200f5ef, 0x0) 00:03:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:03:56 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) dup3(r0, r1, 0x80000) r2 = socket$inet(0x2, 0x1, 0x3ff) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 00:03:56 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2259.966539] should_fail.cold+0x5/0xa [ 2259.967233] should_failslab+0x5/0x20 [ 2259.967830] kmem_cache_alloc_bulk+0x4b/0x320 [ 2259.968523] io_submit_sqes+0x6fe6/0x8610 [ 2259.969153] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2259.969941] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2259.970710] ? find_held_lock+0x2c/0x110 [ 2259.971326] ? io_submit_sqes+0x8610/0x8610 [ 2259.971999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2259.972736] ? wait_for_completion_io+0x270/0x270 [ 2259.973467] ? rcu_read_lock_any_held+0x75/0xa0 [ 2259.974158] ? vfs_write+0x354/0xb10 [ 2259.974733] ? fput_many+0x2f/0x1a0 [ 2259.975269] ? ksys_write+0x1a9/0x260 [ 2259.975849] ? __ia32_sys_read+0xb0/0xb0 [ 2259.976470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.977244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.977992] do_syscall_64+0x33/0x40 [ 2259.978556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2259.979299] RIP: 0033:0x7ff4e8a17b19 [ 2259.979861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2259.982466] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2259.983585] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2259.984623] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2259.985705] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2259.986807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2259.987913] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2260.001595] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2260.086840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2260.126273] FAULT_INJECTION: forcing a failure. [ 2260.126273] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.127973] CPU: 1 PID: 12084 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2260.128947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2260.130004] Call Trace: [ 2260.130419] dump_stack+0x107/0x167 [ 2260.130912] should_fail.cold+0x5/0xa [ 2260.131523] ? create_object.isra.0+0x3a/0xa20 [ 2260.132256] should_failslab+0x5/0x20 [ 2260.132788] kmem_cache_alloc+0x5b/0x310 [ 2260.133300] ? mark_held_locks+0x9e/0xe0 [ 2260.133815] create_object.isra.0+0x3a/0xa20 [ 2260.134370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2260.135022] kmem_cache_alloc+0x159/0x310 [ 2260.135550] xas_alloc+0x336/0x440 [ 2260.136000] xas_create+0x34a/0x10d0 [ 2260.136483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2260.137149] xas_store+0x8c/0x1c40 [ 2260.137608] __xa_store+0x164/0x2d0 [ 2260.138066] ? xa_delete_node+0x280/0x280 [ 2260.138611] ? trace_hardirqs_on+0x5b/0x180 [ 2260.139160] xa_store+0x31/0x50 [ 2260.139582] __io_uring_add_tctx_node+0x1cf/0x520 [ 2260.140200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2260.140881] __do_sys_io_uring_enter+0x146f/0x1890 [ 2260.141652] ? find_held_lock+0x2c/0x110 [ 2260.142160] ? io_submit_sqes+0x8610/0x8610 [ 2260.142751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2260.143507] ? wait_for_completion_io+0x270/0x270 [ 2260.144274] ? rcu_read_lock_any_held+0x75/0xa0 [ 2260.144911] ? vfs_write+0x354/0xb10 [ 2260.145494] ? fput_many+0x2f/0x1a0 [ 2260.146036] ? ksys_write+0x1a9/0x260 [ 2260.146641] ? __ia32_sys_read+0xb0/0xb0 [ 2260.147287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2260.148077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2260.148728] do_syscall_64+0x33/0x40 [ 2260.149332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2260.150125] RIP: 0033:0x7fa8c8de3b19 [ 2260.150722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2260.153124] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2260.154101] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2260.155036] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2260.155959] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2260.156967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2260.157867] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:03:56 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) 00:03:56 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2260.183678] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:03:56 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:03:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0/../file0\x00', 0x4, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="595525b9aaf84bd380818d6bed37356466d50360076f41edb444c18ea12f6e925e10a27c427f899c9b9083ad5ab9e08acc680cc1b53ac73145cd6746cc8e89211e6f862f60eee52cad9f10dc196c75e38725a398936b1ac6657384413fbe83c2604187dc8a61d9e353820da971b9c22cc7d89c317a9240f9302535be117b142242d93b8cb17fd64a42", 0x89, 0xffffffff}], 0x14, &(0x7f00000003c0)={[{@huge_advise}, {@size={'size', 0x3d, [0x65]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x39, 0x31, 0x6d, 0x0, 0x30, 0x25, 0x31, 0x39]}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x9}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x0, 0x34, 0x2d, 0x65, 0x36, 0x70, 0x35]}}, {@huge_within_size}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@uid_gt={'uid>', 0xee01}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@permit_directio}, {@appraise}, {@fsname}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3df01fc8ca78b945ff0203c1d5ceace23a2967f7526324366f564bd9bfa7e08dfc35c808d5f70a7b8474da2350782412a8e3d5152dcb6f7c4b9629fb34fb2a6ad1dd4041b6aaa7cf92c356900c794e89ace6380a862c5987622484832c9cc8241c", @ANYRESHEX=r1, @ANYBLOB=',mmap,\x00']) 00:03:57 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000040)={{0x2, 0x4e23, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e22, @multicast2}, 'dummy0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x0, @multicast1}}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:03:57 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x2, 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x61f9, 0x4) dup2(r3, r4) r5 = inotify_init1(0x0) openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r1, r2, 0x0, 0x100000001) r6 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000200)) sendfile(r6, r0, &(0x7f0000000000)=0xfffffffffffffc00, 0x5) [ 2260.357321] 9pnet: Insufficient options for proto=fd [ 2260.388766] FAULT_INJECTION: forcing a failure. [ 2260.388766] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.391038] CPU: 0 PID: 12106 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2260.392367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2260.393960] Call Trace: [ 2260.394487] dump_stack+0x107/0x167 [ 2260.395183] should_fail.cold+0x5/0xa [ 2260.395907] ? create_object.isra.0+0x3a/0xa20 [ 2260.396788] should_failslab+0x5/0x20 [ 2260.397513] kmem_cache_alloc+0x5b/0x310 [ 2260.398296] ? mark_held_locks+0x9e/0xe0 [ 2260.399067] create_object.isra.0+0x3a/0xa20 [ 2260.399871] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2260.400876] kmem_cache_alloc_bulk+0x168/0x320 [ 2260.401774] io_submit_sqes+0x6fe6/0x8610 [ 2260.402630] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2260.403604] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2260.404560] ? find_held_lock+0x2c/0x110 [ 2260.405361] ? io_submit_sqes+0x8610/0x8610 [ 2260.406195] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2260.407125] ? wait_for_completion_io+0x270/0x270 [ 2260.408056] ? rcu_read_lock_any_held+0x75/0xa0 [ 2260.408928] ? vfs_write+0x354/0xb10 [ 2260.409627] ? fput_many+0x2f/0x1a0 [ 2260.410343] ? ksys_write+0x1a9/0x260 [ 2260.411050] ? __ia32_sys_read+0xb0/0xb0 [ 2260.411786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2260.412775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2260.413759] do_syscall_64+0x33/0x40 [ 2260.414579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2260.415704] RIP: 0033:0x7ff4e8a17b19 [ 2260.416520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2260.420452] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2260.422135] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2260.423556] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2260.424858] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2260.426157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2260.427491] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:04:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:04:12 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x2, 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x61f9, 0x4) dup2(r3, r4) r5 = inotify_init1(0x0) openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r1, r2, 0x0, 0x100000001) r6 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000200)) sendfile(r6, r0, &(0x7f0000000000)=0xfffffffffffffc00, 0x5) 00:04:12 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:12 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) r3 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x5, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="9cb47c14feab2e303f5a3a7e6c62778875c865b0b7d8fda089d0bc622dfe7be9055249fb2dbbcc34d189dc2662352a", 0x2f, 0x7}, {&(0x7f00000002c0)="87f859cfebb338eb03a1af431a81c58c4ccc9f236d8dbefc40493ca1de60be9614d9bf3cf174ce8389b86d2cbd4e3883eff2f7676f6899aba68d30dd08edbc73fc59e68873769a77f8c5fee974e8324eecdc5bd7b27d5f8e95e00acbbca4c6e7aab4604d6e7fede26b150e17f3beab110b583b5e12bfc1d56eb6e05beca5ef1c71ce6ff41a31e4041fbcad971a7dc51becd7787b246fd3ce95f0a1817a0dea86d1159b619d22262dbfc40a5abeb9709865ef7ca9d17631dbb450621e1ff3f71733dee868082c1e77d52b1c1a259a2a1df1", 0xd1, 0x4}, {&(0x7f00000003c0)="ef11aff6088546607a2d7ee47a65bafd6029a38e38aa3807e9b030248d348106115a26a0a04f7d11af083a2f0f7b450946ee1870978a0aae9a38379fbf4bc4d65f3e1caec0fc33fa449bfa7eadee5c6680ca1a8bfa11eb596ee9339250e7eabe333952c12b76ed4b2d008d8d482ed15bd72d72548c024763c8eba04f2a6de35707034a931e180f1d2391307c717056629c07f5dd5756ff7eaa36c03b298299bb1d22b9b5007d84fe008a436e0c3aa9517f90b5df2681b69968717d", 0xbb, 0x6}], 0x0, &(0x7f0000000500)={[{@map_off}, {@cruft}], [{@smackfshat}, {@smackfstransmute={'smackfstransmute', 0x3d, 'sit0\x00'}}, {@uid_gt}, {@measure}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, '.\x97\\'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsfloor}]}) syz_mount_image$nfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x3, 0x2, &(0x7f0000000800)=[{&(0x7f0000000640)="580c22d34425c072e404d1f9fe4b624bdd1a93ca831b17499c23f67ba2292cb2ce3ee6a0f951e2a9ee3b53bb84cb54aadfd7965a5394b8d99d8e5d68609c3eb971f70d6ab006fbf299c2bfa7612a83f634fd1a50d4eff6927f3bb1eae8f9f7baf0f57ee566a8398c9bbc5831ba80fe8a6ab3ab63fb1e166544d062d4cf5c21ba8b036259e6f8b6476515e4a55beac2b59d092f6d96acd8a8d33e16ed13586a72b1b0f80523748b4f7603380074f1f7f1b2d7a5e54f", 0xb5, 0x7}, {&(0x7f0000000700)="b2f34ffaf0667beaf6bb1e8a02ee27a23f622bfe87419b38a7c67ee4cd49c3c7f75f0286f67386eb9487edf8a7569dd008a7d915bd3510a51cfab702b2fe413a122bdc843552a3e9f711352010d9ea6a77ecf61bdac8dff16834c641ecf1ef57ca13e7c4e90041c08a4825720756948fe092a6d583456fc15549b400c8e2326bee63b4bdb20cf60e2f7fb0d3ff38b97b59b352f369dd68c85ac1b5f2fb1e081f228ea9687199b817b0fd9284cb2973b9d399291c47247784f6c1cfd92deb3969e1c3ba2e99e6f9b4aaea3687fdcfdb106f0793c179d7c839b8241565076149dee9f7e441638b6596ed61c663a2e5296f5bfd8bfc", 0xf4, 0x10001}], 0xe4c18, &(0x7f0000000840)={[{'nl80211\x00'}, {'measure'}, {'smackfsfloor'}, {'#*'}, {'\xaf'}], [{@euid_lt}, {@dont_hash}]}) r4 = dup3(r1, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xe1}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) 00:04:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a0200, 0x8e) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x80000000) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x8000, 0x30, 0x8}, 0x18) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)={0x0, 0xfffffffffffffff7}) 00:04:12 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:04:12 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:04:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x32b000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x180, 0x37, 0x200, 0x70bd2b, 0x25dfdbfe, {0x1f}, [@nested={0xe3, 0x8a, 0x0, 0x1, [@generic="0205985ea984833464453d928f82d10cefa8f981951a0bb35e40bf124d1fbb5e3b15ec590dd0b5c94e719d37d3c87e94d591019cd13ef28c4f6264987b2e20f18b297eba9ae4f2ad46cfb6608811f58168f63ba117ec20fe75524dd82700723a956b1b7d8ccd6434c172695c5744dd3bf84aaca76429d87cd70600a560509ccfdb4fb2c5edc4cd13578fea23f4b6e03f079be79117f53d9cd5724a42b4c93e080e80f539130bb0b07d672ba8ddfc10a405363cc4e66ec595aa025398011fa2e16b0c9ff91b27687da647f1f421d226f77c3e91973286fcce877a2a9aaf5d65"]}, @generic="3d2c293ba60d16b72538ff86dfa2e97b7b7013d9deddae97c191c371fa85164fa58dfd027e2f300314f2de0755b83b99164fc2c7fdea87da583f44c292aa8cebffd728d85f416a16ca94c2912f77d8faa1492d5e707136ca228877d5ccf669c31151565976059566d820fb812c9819866bd047bc401d92382d64ad3918ebf2a931f8ad16898be2"]}, 0x180}, 0x1, 0x0, 0x0, 0x40880}, 0x4045) r2 = socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001000000ca0333b70e4452b3a23b6dcb3e9399a44947c8bd73b6a301926969bc1d240101ab047d740732f362eca093787894210099934fbff840f66467263f1264cd26a330ce5cf2da90a16e9bccd0eb550ff94ddcd8a553b7b7aff4b707190b8c18133995bcabde28f61b005720ef76a900000000716b7439dfb75f2cfbb305515f21f3628c02438ba77c4e31507196dc8b329657108415c016d1befc54ce6f6270c990bae414053692a3fb4c936b59df78aad83c9750543da56d2d5515036fbe5d7bdca5522303d1018f8382c61758d98c10b051caa0ec14662bb162da41610ffdcc2e9fcc5f04189f325d", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = socket$inet(0x2, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e23, @local}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 'vxcan1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r4, r0, 0x0, 0x4000007ffffffc) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = accept(r3, &(0x7f0000000740)=@caif, &(0x7f00000007c0)=0x80) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1108142}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r10, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x1) ioctl$FIONCLEX(r8, 0x5450) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0xb6, 0x4, 0x0, 0x0, 0x100000001, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x25, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x5200, 0x4, 0x81, 0x9, 0x400, 0x7, 0x400, 0x0, 0xfffffff7, 0x0, 0x2}, 0x0, 0x4, r7, 0x3) [ 2276.141930] FAULT_INJECTION: forcing a failure. [ 2276.141930] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.145211] CPU: 0 PID: 12142 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2276.147201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.149514] Call Trace: [ 2276.150205] dump_stack+0x107/0x167 [ 2276.151182] should_fail.cold+0x5/0xa [ 2276.152175] ? xas_alloc+0x336/0x440 [ 2276.153147] should_failslab+0x5/0x20 [ 2276.154135] kmem_cache_alloc+0x5b/0x310 [ 2276.155262] xas_alloc+0x336/0x440 [ 2276.156192] xas_create+0x34a/0x10d0 [ 2276.157176] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2276.158532] xas_store+0x8c/0x1c40 [ 2276.159532] __xa_store+0x164/0x2d0 [ 2276.160489] ? xa_delete_node+0x280/0x280 [ 2276.161570] ? trace_hardirqs_on+0x5b/0x180 [ 2276.162694] xa_store+0x31/0x50 [ 2276.163567] __io_uring_add_tctx_node+0x1cf/0x520 [ 2276.164867] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2276.166255] __do_sys_io_uring_enter+0x146f/0x1890 [ 2276.167552] ? find_held_lock+0x2c/0x110 [ 2276.168622] ? io_submit_sqes+0x8610/0x8610 [ 2276.169805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2276.171088] ? wait_for_completion_io+0x270/0x270 [ 2276.172350] ? rcu_read_lock_any_held+0x75/0xa0 [ 2276.173578] ? vfs_write+0x354/0xb10 [ 2276.174588] ? fput_many+0x2f/0x1a0 [ 2276.175406] ? ksys_write+0x1a9/0x260 [ 2276.176249] ? __ia32_sys_read+0xb0/0xb0 [ 2276.177153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.178313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.179528] do_syscall_64+0x33/0x40 [ 2276.180359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.181494] RIP: 0033:0x7fa8c8de3b19 [ 2276.182318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.186589] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2276.188361] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2276.189998] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2276.191658] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.193322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2276.194984] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 [ 2276.206138] FAULT_INJECTION: forcing a failure. [ 2276.206138] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.208288] CPU: 1 PID: 12136 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2276.209462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.210880] Call Trace: [ 2276.211328] dump_stack+0x107/0x167 [ 2276.211943] should_fail.cold+0x5/0xa [ 2276.212586] ? create_object.isra.0+0x3a/0xa20 [ 2276.213354] should_failslab+0x5/0x20 [ 2276.213995] kmem_cache_alloc+0x5b/0x310 [ 2276.214694] create_object.isra.0+0x3a/0xa20 [ 2276.215424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2276.216257] kmem_cache_alloc_bulk+0x168/0x320 [ 2276.217027] io_submit_sqes+0x6fe6/0x8610 [ 2276.217731] ? __do_sys_io_uring_enter+0x1ef/0x1890 [ 2276.218551] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2276.219380] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2276.220189] ? io_submit_sqes+0x8610/0x8610 [ 2276.220914] ? recalibrate_cpu_khz+0x10/0x10 [ 2276.221658] ? ktime_get+0x158/0x1f0 [ 2276.222280] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2276.223022] ? clockevents_program_event+0x131/0x360 [ 2276.223871] ? tick_program_event+0xa8/0x140 [ 2276.224603] ? hrtimer_interrupt+0x771/0x9b0 [ 2276.225336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.226192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.227048] do_syscall_64+0x33/0x40 [ 2276.227665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.228496] RIP: 0033:0x7ff4e8a17b19 [ 2276.229104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.232113] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2276.233349] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2276.234518] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2276.235678] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.236828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2276.237992] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2276.241021] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:04:12 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) r2 = dup(0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev, @initdev, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x48, &(0x7f0000000080)={@loopback, @private=0xa010101, r3}, 0xc) 00:04:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x46, 0x0, "89f81e08f6b5415ecb286fab51c353c447794daf6c0e00a4be825afd45f2b94456edb66c13f597f933051f56e01d0c59f705602d1f548e6f21716e4e007c55b0bccb897bc82cb46a9dd50728fb2d0f27"}, 0xd8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local}, 0x1c) 00:04:13 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2276.287051] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2276.309745] FAULT_INJECTION: forcing a failure. [ 2276.309745] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.311766] CPU: 1 PID: 12153 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2276.312871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.314196] Call Trace: [ 2276.314631] dump_stack+0x107/0x167 [ 2276.315206] should_fail.cold+0x5/0xa [ 2276.315826] ? create_object.isra.0+0x3a/0xa20 [ 2276.316549] should_failslab+0x5/0x20 [ 2276.317178] kmem_cache_alloc+0x5b/0x310 [ 2276.317800] ? mark_held_locks+0x9e/0xe0 [ 2276.318505] create_object.isra.0+0x3a/0xa20 [ 2276.319194] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2276.319988] kmem_cache_alloc_bulk+0x168/0x320 [ 2276.320721] io_submit_sqes+0x6fe6/0x8610 [ 2276.321415] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2276.322198] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2276.322969] ? io_submit_sqes+0x8610/0x8610 [ 2276.323633] ? recalibrate_cpu_khz+0x10/0x10 [ 2276.324298] ? ktime_get+0x158/0x1f0 [ 2276.324894] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2276.325583] ? clockevents_program_event+0x131/0x360 [ 2276.326380] ? tick_program_event+0xa8/0x140 [ 2276.327089] ? hrtimer_interrupt+0x771/0x9b0 [ 2276.327790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.328607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.329425] do_syscall_64+0x33/0x40 [ 2276.329996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.330802] RIP: 0033:0x7ff4e8a17b19 [ 2276.331319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.334161] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2276.335342] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2276.336434] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2276.337559] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.338678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2276.339755] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:04:13 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x2, 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x61f9, 0x4) dup2(r3, r4) r5 = inotify_init1(0x0) openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r1, r2, 0x0, 0x100000001) r6 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000200)) sendfile(r6, r0, &(0x7f0000000000)=0xfffffffffffffc00, 0x5) [ 2276.402965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35144 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 00:04:13 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2276.454397] FAULT_INJECTION: forcing a failure. [ 2276.454397] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.456222] CPU: 1 PID: 12160 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2276.457180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2276.458367] Call Trace: [ 2276.458757] dump_stack+0x107/0x167 [ 2276.459283] should_fail.cold+0x5/0xa [ 2276.459829] ? create_object.isra.0+0x3a/0xa20 [ 2276.460474] should_failslab+0x5/0x20 [ 2276.461020] kmem_cache_alloc+0x5b/0x310 [ 2276.461604] ? mark_held_locks+0x9e/0xe0 [ 2276.462191] create_object.isra.0+0x3a/0xa20 [ 2276.462824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2276.463547] kmem_cache_alloc_bulk+0x168/0x320 [ 2276.464214] io_submit_sqes+0x6fe6/0x8610 [ 2276.464835] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2276.465526] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2276.466216] ? find_held_lock+0x2c/0x110 [ 2276.466809] ? io_submit_sqes+0x8610/0x8610 [ 2276.467428] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2276.467837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34247 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.468110] ? wait_for_completion_io+0x270/0x270 [ 2276.468127] ? rcu_read_lock_any_held+0x75/0xa0 [ 2276.468138] ? vfs_write+0x354/0xb10 [ 2276.468158] ? fput_many+0x2f/0x1a0 [ 2276.473224] ? ksys_write+0x1a9/0x260 [ 2276.473750] ? __ia32_sys_read+0xb0/0xb0 [ 2276.474323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2276.475059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2276.475802] do_syscall_64+0x33/0x40 [ 2276.476314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2276.477018] RIP: 0033:0x7ff4e8a17b19 [ 2276.477537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.480122] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2276.481165] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2276.482132] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2276.483113] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.484084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2276.485057] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2276.493264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53893 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.501356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53481 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.611463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35656 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.626839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.650303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33608 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.660086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35140 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.708805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 [ 2276.711352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=12138 comm=syz-executor.1 00:04:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000001a8a419d0a9f348dfad3ad140a395456329a800db4e556edd59bd8024f311aaf1d0a79435345927ed30bdaa84c588fa81c4d7b1795a47e8b4091759052541e52f51238c8080ca17a56eaae534bfa3597907b71d006e4dbf25a772a06990364e0b72e090f31b32701928497ac1d6a4898f61ac7bbb165b58af3cb3e4987f4fec294c07de68d47d7d1f4daedfa9f00c6d6453907eaae10bd7e16955d93a51770ffa2c9fdfde8aa912a4904f031a03fcbacfbad5c7b7abaf995ee3573a5c91eae01d5fb2619930baff8fa56e171fc7d3821b374007b", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = socket$inet(0x2, 0x800, 0x31f) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:04:28 executing program 7: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x20000000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xf4d3}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000001200)=0x13d) sendmsg$nl_generic(r3, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={0x0, 0x13dc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) syz_io_uring_setup(0x2203, &(0x7f0000000340), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x4003, @fd, 0x3, &(0x7f0000000a80)="366b6f742e244f01a5533593c4170f86db79ed41caf9db927f85e8989a3e827e1383c681e1b2cfe5ca6ec6195e9e1c9b8740116123357069d61575adf22f29fca646e0b075a7c141673358d713729bdac962f4ed90fa5d29b6a19a0690552386cdc0ad2bb6feb3e1ac20e72402bc2934ed670aaa8b028068b70b", 0x7a, 0xb}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,fowner>', @ANYRESDEC=r4, @ANYBLOB="2c6673636f6e746578743d756e636f6e66696e65645f752c6f626a5f6c653d236d5b2c000472e9eb5c677d843b35f4be0d6b99dc181d9f67467ba9fd914a91a3fb51f3f1d0abcb5c4ffbb3ab5f5e4c323a3d15fd0226991aa6bb2d0a8b0933c97bf30dc0131da4dcc43727f95f41bffac30b92967940ae155ca91b977015c380db77674413c0d16a478f58796f939486069e98bebd69a9503575a5173cc73fbefd822d2af2f434b368109312878cf89ff6674bde5450d3e7c6944deccf54556c4a0e830ea3a159445d12fd3e831ab0d1058c80272796dfcc4e2033cd358bde4c0000"]) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f55006680d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34adbd607dd123ec7d83de8c893d9742205ac802ea20706386b72a834b36105d2050876eccd754e33badbc5f94c5b513ee5b4f2433ee7443000000bc00418008000000", @ANYRES32=r8, @ANYBLOB="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"], 0x13c}}, 0x0) 00:04:28 executing program 2: syz_io_uring_setup(0x32b2, &(0x7f0000000000)={0x0, 0x18eb, 0x0, 0x3, 0x54}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0xffffffe0, 0x4, 0x0, {0x0, r5}}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_cache\x00') io_uring_enter(r6, 0x4ffc, 0x3b22, 0x0, &(0x7f0000000280)={[0x800]}, 0x8) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r8 = socket$inet(0x2, 0xa, 0x0) signalfd4(r8, &(0x7f00000002c0)={[0x9]}, 0x8, 0x80800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:04:28 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:04:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:04:28 executing program 5: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:28 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r1, 0x8) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7002) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) socket$inet(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x7, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:04:28 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2291.404763] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2291.414825] FAULT_INJECTION: forcing a failure. [ 2291.414825] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.415456] FAULT_INJECTION: forcing a failure. [ 2291.415456] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.416716] CPU: 1 PID: 12172 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2291.419887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.421024] Call Trace: [ 2291.421380] dump_stack+0x107/0x167 [ 2291.421892] should_fail.cold+0x5/0xa [ 2291.422413] ? create_object.isra.0+0x3a/0xa20 [ 2291.423052] should_failslab+0x5/0x20 [ 2291.423582] kmem_cache_alloc+0x5b/0x310 [ 2291.424147] ? mark_held_locks+0x9e/0xe0 [ 2291.424715] create_object.isra.0+0x3a/0xa20 [ 2291.425313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2291.426017] kmem_cache_alloc_bulk+0x168/0x320 [ 2291.426628] io_submit_sqes+0x6fe6/0x8610 [ 2291.427224] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2291.427898] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2291.428556] ? find_held_lock+0x2c/0x110 [ 2291.429129] ? io_submit_sqes+0x8610/0x8610 [ 2291.429740] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2291.430399] ? wait_for_completion_io+0x270/0x270 [ 2291.431083] ? rcu_read_lock_any_held+0x75/0xa0 [ 2291.431749] ? vfs_write+0x354/0xb10 [ 2291.432240] ? fput_many+0x2f/0x1a0 [ 2291.432753] ? ksys_write+0x1a9/0x260 [ 2291.433272] ? __ia32_sys_read+0xb0/0xb0 [ 2291.433852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2291.434532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2291.435249] do_syscall_64+0x33/0x40 [ 2291.435774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.436471] RIP: 0033:0x7fa8c8de3b19 [ 2291.437001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.439519] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2291.440567] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2291.441552] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2291.442526] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.443501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.444474] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2291.445442] CPU: 0 PID: 12177 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2291.447019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.448897] Call Trace: [ 2291.449495] dump_stack+0x107/0x167 [ 2291.450349] should_fail.cold+0x5/0xa [ 2291.451228] ? create_object.isra.0+0x3a/0xa20 [ 2291.452274] should_failslab+0x5/0x20 [ 2291.453163] kmem_cache_alloc+0x5b/0x310 [ 2291.454109] ? mark_held_locks+0x9e/0xe0 [ 2291.455030] create_object.isra.0+0x3a/0xa20 [ 2291.456053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2291.457217] kmem_cache_alloc_bulk+0x168/0x320 [ 2291.458263] io_submit_sqes+0x6fe6/0x8610 [ 2291.459245] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2291.460412] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2291.461533] ? find_held_lock+0x2c/0x110 [ 2291.462472] ? io_submit_sqes+0x8610/0x8610 [ 2291.463472] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2291.464574] ? wait_for_completion_io+0x270/0x270 [ 2291.465665] ? rcu_read_lock_any_held+0x75/0xa0 [ 2291.466734] ? vfs_write+0x354/0xb10 [ 2291.467574] ? fput_many+0x2f/0x1a0 [ 2291.468410] ? ksys_write+0x1a9/0x260 [ 2291.469288] ? __ia32_sys_read+0xb0/0xb0 [ 2291.470214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2291.471396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2291.472562] do_syscall_64+0x33/0x40 [ 2291.473394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.474548] RIP: 0033:0x7ff4e8a17b19 [ 2291.475393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.479548] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2291.481277] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2291.482917] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2291.484563] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.486203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.487873] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2291.519253] 9pnet: Insufficient options for proto=fd 00:04:28 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2291.557018] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:04:28 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="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", 0x1000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup3(r2, r3, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="03020900001d5000a450ef20c49a34b4dad7cd282e27f11de2e030fadbbc87ec6f37f4431b9d028295789ef2c06c75edb5862b8affa2f31b12c0daf543438d4f974158e9e61333b6ff0300001f4c150a1bdf883820a870e82b352ed743fa0818c746b432c47d6759311a65b8ceb2fd878387406f08a0d9be98355cfa9ae77e313f3197713bcfa642456073397bb9b8d93775c841189558254da92616fecfb73b6c931a847a"], 0xad, 0x3) r4 = socket$inet(0x2, 0x800, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @remote}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x400, 0x5, 0xff}) [ 2291.607484] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 2291.685120] FAULT_INJECTION: forcing a failure. [ 2291.685120] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.686713] CPU: 1 PID: 12199 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2291.687669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.688689] Call Trace: [ 2291.689049] dump_stack+0x107/0x167 [ 2291.689524] should_fail.cold+0x5/0xa [ 2291.690019] ? create_object.isra.0+0x3a/0xa20 [ 2291.690610] should_failslab+0x5/0x20 [ 2291.691084] kmem_cache_alloc+0x5b/0x310 [ 2291.691595] ? mark_held_locks+0x9e/0xe0 [ 2291.692094] create_object.isra.0+0x3a/0xa20 [ 2291.692646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2291.693291] kmem_cache_alloc_bulk+0x168/0x320 [ 2291.693873] io_submit_sqes+0x6fe6/0x8610 [ 2291.694424] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2291.695055] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2291.695663] ? find_held_lock+0x2c/0x110 [ 2291.696175] ? io_submit_sqes+0x8610/0x8610 [ 2291.696714] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2291.697324] ? wait_for_completion_io+0x270/0x270 [ 2291.697927] ? rcu_read_lock_any_held+0x75/0xa0 [ 2291.698506] ? vfs_write+0x354/0xb10 [ 2291.698982] ? fput_many+0x2f/0x1a0 [ 2291.699437] ? ksys_write+0x1a9/0x260 [ 2291.699902] ? __ia32_sys_read+0xb0/0xb0 [ 2291.700402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2291.701041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2291.701675] do_syscall_64+0x33/0x40 [ 2291.702130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.702755] RIP: 0033:0x7fa8c8de3b19 [ 2291.703215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.705461] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2291.706413] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2291.707301] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2291.708179] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.709063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.709929] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:04:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:04:28 executing program 5: syz_io_uring_setup(0x32b2, &(0x7f0000000000)={0x0, 0x18eb, 0x0, 0x3, 0x54}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r5}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0xffffffe0, 0x4, 0x0, {0x0, r5}}, 0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_cache\x00') io_uring_enter(r6, 0x4ffc, 0x3b22, 0x0, &(0x7f0000000280)={[0x800]}, 0x8) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r8 = socket$inet(0x2, 0xa, 0x0) signalfd4(r8, &(0x7f00000002c0)={[0x9]}, 0x8, 0x80800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:04:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfd2, 0x8000000}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:04:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x111a0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2291.940797] 9pnet: Insufficient options for proto=fd 00:04:28 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:04:28 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2292.035818] FAULT_INJECTION: forcing a failure. [ 2292.035818] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.037145] CPU: 1 PID: 12221 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2292.037923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.038867] Call Trace: [ 2292.039171] dump_stack+0x107/0x167 [ 2292.039594] should_fail.cold+0x5/0xa [ 2292.040030] ? create_object.isra.0+0x3a/0xa20 [ 2292.040549] should_failslab+0x5/0x20 [ 2292.040981] kmem_cache_alloc+0x5b/0x310 [ 2292.041440] ? mark_held_locks+0x9e/0xe0 [ 2292.041907] create_object.isra.0+0x3a/0xa20 [ 2292.042399] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.042974] kmem_cache_alloc_bulk+0x168/0x320 [ 2292.043502] io_submit_sqes+0x6fe6/0x8610 [ 2292.043992] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2292.044554] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2292.045099] ? find_held_lock+0x2c/0x110 [ 2292.045559] ? io_submit_sqes+0x8610/0x8610 [ 2292.046054] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2292.046603] ? wait_for_completion_io+0x270/0x270 [ 2292.047151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2292.047682] ? vfs_write+0x354/0xb10 [ 2292.048104] ? fput_many+0x2f/0x1a0 [ 2292.048516] ? ksys_write+0x1a9/0x260 [ 2292.048947] ? __ia32_sys_read+0xb0/0xb0 [ 2292.049406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.049998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2292.050583] do_syscall_64+0x33/0x40 [ 2292.051001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.051597] RIP: 0033:0x7ff4e8a17b19 [ 2292.052017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.054101] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2292.054959] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2292.055772] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2292.056575] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.057378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2292.058181] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2292.115907] audit: type=1326 audit(1738713868.830:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.132886] audit: type=1326 audit(1738713868.847:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.140060] FAULT_INJECTION: forcing a failure. [ 2292.140060] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.143294] CPU: 0 PID: 12225 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2292.144898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.146795] Call Trace: [ 2292.147413] dump_stack+0x107/0x167 [ 2292.148241] should_fail.cold+0x5/0xa [ 2292.149118] ? create_object.isra.0+0x3a/0xa20 [ 2292.150179] should_failslab+0x5/0x20 [ 2292.151051] kmem_cache_alloc+0x5b/0x310 [ 2292.151980] ? mark_held_locks+0x9e/0xe0 [ 2292.152922] create_object.isra.0+0x3a/0xa20 [ 2292.153925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.155079] kmem_cache_alloc_bulk+0x168/0x320 [ 2292.156131] io_submit_sqes+0x6fe6/0x8610 [ 2292.157100] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2292.158217] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2292.159306] ? find_held_lock+0x2c/0x110 [ 2292.160261] ? io_submit_sqes+0x8610/0x8610 [ 2292.161251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2292.161829] audit: type=1326 audit(1738713868.853:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.162334] ? wait_for_completion_io+0x270/0x270 [ 2292.165870] ? rcu_read_lock_any_held+0x75/0xa0 [ 2292.166911] ? vfs_write+0x354/0xb10 [ 2292.167780] ? fput_many+0x2f/0x1a0 [ 2292.168613] ? ksys_write+0x1a9/0x260 [ 2292.169473] ? __ia32_sys_read+0xb0/0xb0 [ 2292.170397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.171387] audit: type=1326 audit(1738713868.853:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.171602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2292.171628] do_syscall_64+0x33/0x40 [ 2292.175979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.177136] RIP: 0033:0x7fa8c8de3b19 [ 2292.177982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.182268] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2292.183998] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2292.185619] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2292.187224] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.188842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2292.190449] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2292.197839] audit: type=1326 audit(1738713868.910:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.200314] audit: type=1326 audit(1738713868.910:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.206001] audit: type=1326 audit(1738713868.910:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.216318] audit: type=1326 audit(1738713868.925:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.226241] audit: type=1326 audit(1738713868.926:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2292.236985] audit: type=1326 audit(1738713868.926:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12180 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 00:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:04:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in6=@empty}}, 0xe8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@multicast2, 0x4e23, 0x63c1, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2, r3, 0xffffffffffffffff}, {0x0, 0x1, 0x6, 0x1031, 0x80000000000, 0x5, 0x5, 0x1}, {0x7, 0x3, 0x8000, 0x40}, 0x3, 0x0, 0x2, 0x1, 0x6, 0x2}, {{@in=@remote, 0x4d5}, 0x2, @in=@broadcast, 0x3502, 0x1, 0x0, 0x4, 0x1ff, 0x57, 0x3}}, 0xe8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50800, 0x28) 00:04:45 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:04:45 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:04:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:04:45 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:04:45 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r1, 0x8) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7002) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000004c0)={{r3}, "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"}) socket$inet(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x7, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:04:45 executing program 2: r0 = socket$inet(0x2, 0x6, 0x6ca) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440, 0x5) socket$inet(0x2, 0x1, 0x80000001) r1 = socket$inet(0x2, 0xa, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = inotify_init() sendfile(r2, r3, &(0x7f0000000140)=0x7, 0x81) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e080)={0x140c0000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "c9790294e8f5f7"}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) r6 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) r10 = dup2(r6, r9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) getsockopt$inet6_tcp_int(r10, 0x6, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2308.511182] FAULT_INJECTION: forcing a failure. [ 2308.511182] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.513767] CPU: 1 PID: 12249 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2308.515230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2308.517011] Call Trace: [ 2308.517580] dump_stack+0x107/0x167 [ 2308.518346] should_fail.cold+0x5/0xa [ 2308.519156] ? create_object.isra.0+0x3a/0xa20 [ 2308.520127] should_failslab+0x5/0x20 [ 2308.520939] kmem_cache_alloc+0x5b/0x310 [ 2308.521808] ? mark_held_locks+0x9e/0xe0 [ 2308.522677] create_object.isra.0+0x3a/0xa20 [ 2308.523610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2308.525020] kmem_cache_alloc_bulk+0x168/0x320 [ 2308.526212] io_submit_sqes+0x6fe6/0x8610 [ 2308.527314] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2308.528546] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2308.529579] ? find_held_lock+0x2c/0x110 [ 2308.530449] ? io_submit_sqes+0x8610/0x8610 [ 2308.531371] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2308.532407] ? wait_for_completion_io+0x270/0x270 [ 2308.533437] ? rcu_read_lock_any_held+0x75/0xa0 [ 2308.534420] ? vfs_write+0x354/0xb10 [ 2308.535201] ? fput_many+0x2f/0x1a0 [ 2308.535982] ? ksys_write+0x1a9/0x260 [ 2308.536782] ? __ia32_sys_read+0xb0/0xb0 [ 2308.537647] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2308.538742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2308.539834] do_syscall_64+0x33/0x40 [ 2308.540625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2308.541721] RIP: 0033:0x7ff4e8a17b19 [ 2308.542513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.546423] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2308.548025] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2308.549534] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2308.551040] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.552847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2308.554700] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 00:04:45 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="018020000100000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) close_range(r0, r1, 0x2) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x101, 0x10001}) sendfile(r3, r0, 0x0, 0x4000007ffffffc) [ 2308.652756] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:04:45 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) getsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891a, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @empty}}) r3 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r7 = dup2(r3, r6) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0200000000000000072f66696c653000"]) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) 00:04:45 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000000500"/30], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x745) r1 = dup(0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:04:45 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2308.746451] kauditd_printk_skb: 11 callbacks suppressed [ 2308.746470] audit: type=1326 audit(1738713885.460:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2308.753002] audit: type=1326 audit(1738713885.460:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2308.757912] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2308.761273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2308.769378] audit: type=1326 audit(1738713885.483:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2308.777374] audit: type=1326 audit(1738713885.491:141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2308.784634] audit: type=1326 audit(1738713885.491:142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2308.799444] FAULT_INJECTION: forcing a failure. [ 2308.799444] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.802414] CPU: 1 PID: 12255 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2308.803888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2308.805648] Call Trace: [ 2308.806207] dump_stack+0x107/0x167 [ 2308.806975] should_fail.cold+0x5/0xa [ 2308.807806] should_failslab+0x5/0x20 [ 2308.807860] FAULT_INJECTION: forcing a failure. [ 2308.807860] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.808619] kmem_cache_alloc_bulk+0x4b/0x320 [ 2308.808650] io_submit_sqes+0x6fe6/0x8610 [ 2308.808707] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2308.814036] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2308.815069] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2308.816025] ? _raw_spin_unlock_irq+0x27/0x30 [ 2308.816976] ? io_submit_sqes+0x8610/0x8610 [ 2308.817891] ? finish_task_switch+0x126/0x5d0 [ 2308.818841] ? finish_task_switch+0xef/0x5d0 [ 2308.819772] ? __switch_to+0x572/0xf70 [ 2308.820596] ? __switch_to_asm+0x3a/0x60 [ 2308.821454] ? __switch_to_asm+0x34/0x60 [ 2308.822328] ? __schedule+0x82c/0x1ea0 [ 2308.823173] ? io_schedule_timeout+0x140/0x140 [ 2308.824282] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2308.825257] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2308.827019] ? ksys_write+0x1a9/0x260 [ 2308.827857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2308.828980] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2308.830075] do_syscall_64+0x33/0x40 [ 2308.830867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2308.831967] RIP: 0033:0x7fa8c8de3b19 [ 2308.832762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.836678] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2308.838296] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2308.839814] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2308.841338] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.842852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2308.844370] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2308.845927] CPU: 0 PID: 12266 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2308.847554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2308.849474] Call Trace: [ 2308.850108] dump_stack+0x107/0x167 [ 2308.850957] should_fail.cold+0x5/0xa [ 2308.851840] ? create_object.isra.0+0x3a/0xa20 [ 2308.852927] should_failslab+0x5/0x20 [ 2308.853815] kmem_cache_alloc+0x5b/0x310 [ 2308.854809] ? mark_held_locks+0x9e/0xe0 [ 2308.855644] audit: type=1326 audit(1738713885.560:143): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc9ab28b19 code=0x7ffc0000 [ 2308.855993] create_object.isra.0+0x3a/0xa20 [ 2308.856025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2308.862650] kmem_cache_alloc_bulk+0x168/0x320 [ 2308.863710] io_submit_sqes+0x6fe6/0x8610 [ 2308.864698] ? percpu_ref_tryget_many+0x1a4/0x2d0 [ 2308.865827] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2308.866119] audit: type=1326 audit(1738713885.560:144): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fbc9ab28ad7 code=0x7ffc0000 [ 2308.866963] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2308.866998] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2308.873664] ? _raw_spin_unlock_irq+0x27/0x30 [ 2308.874692] ? io_submit_sqes+0x8610/0x8610 [ 2308.875679] ? finish_task_switch+0x126/0x5d0 [ 2308.876036] audit: type=1326 audit(1738713885.560:145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbc9aadbab7 code=0x7ffc0000 [ 2308.876722] ? finish_task_switch+0xef/0x5d0 [ 2308.876751] ? __switch_to+0x572/0xf70 [ 2308.883078] ? __switch_to_asm+0x3a/0x60 [ 2308.884019] ? __switch_to_asm+0x34/0x60 [ 2308.884960] ? __schedule+0x82c/0x1ea0 [ 2308.885878] ? io_schedule_timeout+0x140/0x140 [ 2308.886824] audit: type=1326 audit(1738713885.560:146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbc9aadbab7 code=0x7ffc0000 [ 2308.886930] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2308.886969] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2308.893744] ? ksys_write+0x1a9/0x260 [ 2308.894642] do_syscall_64+0x33/0x40 [ 2308.895480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2308.896690] RIP: 0033:0x7ff4e8a17b19 [ 2308.897559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2308.901794] RSP: 002b:00007ff4e5f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2308.903554] RAX: ffffffffffffffda RBX: 00007ff4e8b2af60 RCX: 00007ff4e8a17b19 [ 2308.905191] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2308.905350] audit: type=1326 audit(1738713885.560:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12235 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbc9aadbab7 code=0x7ffc0000 [ 2308.906836] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.906850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2308.906863] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2308.917196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2308.918897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2308.939400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:45 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x0, @empty}}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e23, @multicast2}, 0x199, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000080)='caif0\x00', 0xfd1, 0xa61, 0x5}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index}, 0x80000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r5, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0xfbd, 0x2000, 0x1, {0x0, r7}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891a, &(0x7f00000001c0)={'wlan1\x00', {0x2, 0x0, @empty}}) sendfile(0xffffffffffffffff, r5, &(0x7f00000003c0)=0x9, 0xfff) 00:04:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000180)={'geneve0\x00', {0x2, 0x0, @private}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) getsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) 00:04:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:04:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) r0 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat(r0, &(0x7f0000000300)='./mnt/file0\x00', 0x4c8180, 0x120) openat(r0, &(0x7f0000000200)='./file1\x00', 0x401, 0x40) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@local, r4}, 0x14) stat(&(0x7f0000000480)='./file2\x00', &(0x7f00000006c0)) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1, 0x3, &(0x7f00000008c0)=[{&(0x7f0000000500)="150ac111dbf36cc745121458c3fe9aaa7ff840599d864e16dfe04d351cd1812938189f29ce644a652bfc16f3d8e31bf71e65437fd88388ec13aa37a1ed2da8cf6f172b11bf51bee09eb8cff3160de90f4df21aa9ba52136ebdaa5fd43fbb2c33022ce7bf643351662737903365ec0ff57bb28a41f3bb1948795831071f515d89621bfc2c6619059f74a0f9d7aa7d6198167855b9e1f62c47a51ea963822d89924831d9fe9ef538a158c58d9f1f58400fe079fe92712bab0348c99998360f2acda762f5900828b04732430d6a1b9b8f8bf14c0830a1c4920fdce52042068dccbabd3fc770e40246ddcc", 0xe9, 0x8ddf}, {&(0x7f0000000400)="8a6ef9eb650e1ed2ad3b1777fa05f4d32675ec41c9e5e471a6b5d441384158ebdade4e40b5d4837381d298e482e9859c32c60136079af137454f0dd9fb7861144a5be37ae7912136c756fec10516a5bfe0536533536b886900d7131ea1c3a66e580050786d0b4fa5bbbf32842ca02ba6edac27bded", 0x75, 0x7}, {&(0x7f0000000600)="920ada0842a19e1b824c3175e89b310c029345dad7de90e833d88b43e37d04373f9b7851758fd137cd95f3efe9c53c9d2b044cdfc2f66c947ad24f856c88bac982db0fce0920", 0x46, 0x4}], 0x0, &(0x7f0000000940)={[{@mode={'mode', 0x3d, 0x6}}, {@huge_advise}, {@size={'size', 0x3d, [0x34, 0x74, 0x37, 0x36, 0x68, 0x1a]}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '#/,'}}]}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000000000000000000b56427413d709ed7000000000043c0927b691273ddc73ac272589b71ad6cda8f8e9549edd4a4efdf6243e800004f3fd9080c5b1cc78cf33686201f6b87a7d9852e16de35"]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"]}) [ 2309.225374] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2309.284011] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:05:01 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:01 executing program 5: r0 = io_uring_setup(0x2c60, &(0x7f00000005c0)={0x0, 0x1624, 0x4, 0x1, 0x78}) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000680)={'syzkaller1\x00', {0x2, 0x0, @remote}}) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r5 = dup2(r1, r4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r8, @ANYBLOB="04003400140055008a93c5c4b83142b1321d8f9831e7d96d9df24ab31b8625b05736146aee47493698deb96a39b694a6f02dd1e5f956f235255090b9aad68b99cb8ccac974efff5496b27db44dbb28887fd7fbc20d863acb551a797e42e6086436e4bf2b8600eb38a3e79f570cb75a809a08129ebc939a1156f1b4824793a94699ee9ec98c7e2d8f6054e7c3"], 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040840}, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f8000020004000000000000000000001", 0x25, 0x1000000}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="69b3751c8ef4f15c913d63703733372c73686f72746a616d653d6d697865642c001eb82866f5b72bb653cb3e0bf1e6c968431aeeee0334e3237dcad1d3f13278d4f4c01d4bec47e09377658613e8177d4e15992efd51baec71df8093f9aae308f5970648b62066481fdf166b2449b471c7539f9108b6ae32a6c7e9937ad47f0f95426a"]) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000480)=[{&(0x7f0000000380)="f72eb98f5175fee38f07bb28b2bddd75fa31803b83ff0cac2530fa1723dd39afa02ae78a5399ecf0f13ceedafea3821f37e19af3e88f703ae89c4d91b55ddef18b8400f486eeb06a6669723a70e48d0cd39d50159ebd242075556b44a21474a83968ce838f266b613740353778177c9a5b2bd907a8fc70d840cc03864f86cc56ea21ff040d37c492501962910c2bd181", 0x90, 0x8a2}, {&(0x7f0000000440), 0x0, 0x7f}], 0x10, &(0x7f00000004c0)={[{@huge_always}, {@huge_advise}], [{@smackfsdef={'smackfsdef', 0x3d, 'trusted.overlay.redirect\x00'}}]}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2e}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xff}]}, 0x28}}, 0x800) 00:05:01 executing program 1: socket$inet(0x2, 0x3, 0xff) r0 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000200)) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101002, 0x55) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)=ANY=[]) r3 = socket$inet(0x2, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4000007ffffffc) 00:05:01 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) socket$inet(0x2, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x0, @empty}}) 00:05:01 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:01 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:05:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2e000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:01 executing program 6: r0 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='{(', &(0x7f0000000080)='hpfs\x00', 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x24400, 0x130) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x52, 0x5, 0x7, 0x5, "2e134cb5b4b832804289d90a1a2d97ee1c6f70edbe20c42041922894d432e29e4056ed8017755c5821579ac628acabc4df7134e9ad5082c600b8311ac6bc40a9", "48ab2dda367e6544340b0b8a2ab646c828933943f04b6f2c618ae57dc70ceabd", [0xafc7, 0x20]}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x10) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x9217, 0x4, 0x14, 0x8, "c16d2135bc1f7fa8f14df223b2d756a6f55ebaafbdf49743ef250ef9f2e96df7dd7014223fb6eb7daa83a464f0e9b70fcf15b900336654955dcfbb7eca984b1c", "0eafe35f33d000048af1459e026d86c267d6ba13360d3ef7c274e427f1703c08", [0x40, 0x7]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = fsmount(r5, 0x1, 0xf0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000340)) write$P9_RREADLINK(r6, &(0x7f0000000380)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = gettid() clone3(&(0x7f0000002540)={0x4020080, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x5}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000001500)=""/4096, &(0x7f0000002500)=[0xffffffffffffffff, r10, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7, {r1}}, 0x58) [ 2324.902083] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2324.904301] FAULT_INJECTION: forcing a failure. [ 2324.904301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.907412] CPU: 1 PID: 12310 Comm: syz-executor.0 Not tainted 5.10.233 #1 [ 2324.908886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.910614] Call Trace: [ 2324.911188] dump_stack+0x107/0x167 [ 2324.911953] should_fail.cold+0x5/0xa [ 2324.912767] _copy_to_user+0x2e/0x180 [ 2324.913578] simple_read_from_buffer+0xcc/0x160 [ 2324.914558] proc_fail_nth_read+0x198/0x230 [ 2324.915461] ? proc_sessionid_read+0x230/0x230 [ 2324.916415] ? security_file_permission+0xb1/0xe0 [ 2324.917444] ? proc_sessionid_read+0x230/0x230 [ 2324.918397] vfs_read+0x228/0x620 [ 2324.919135] ksys_read+0x12d/0x260 [ 2324.919880] ? vfs_write+0xb10/0xb10 [ 2324.920688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.921791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.922869] do_syscall_64+0x33/0x40 [ 2324.923650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.924724] RIP: 0033:0x7ff4e89ca69c [ 2324.925503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2324.929352] RSP: 002b:00007ff4e5f8d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2324.930948] RAX: ffffffffffffffda RBX: 0000000000000517 RCX: 00007ff4e89ca69c [ 2324.932452] RDX: 000000000000000f RSI: 00007ff4e5f8d1e0 RDI: 0000000000000008 [ 2324.933954] RBP: 00007ff4e5f8d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.935440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.936938] R13: 00007ffe7b63a97f R14: 00007ff4e5f8d300 R15: 0000000000022000 [ 2325.079942] FAT-fs (loop5): Unrecognized mount option "i³uŽôñ\‘=cp737" or missing value 00:05:01 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2325.133487] FAULT_INJECTION: forcing a failure. [ 2325.133487] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.136965] CPU: 1 PID: 12318 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2325.138709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.140806] Call Trace: [ 2325.141483] dump_stack+0x107/0x167 [ 2325.142413] should_fail.cold+0x5/0xa [ 2325.143386] ? create_object.isra.0+0x3a/0xa20 [ 2325.144559] should_failslab+0x5/0x20 [ 2325.145523] kmem_cache_alloc+0x5b/0x310 [ 2325.146565] create_object.isra.0+0x3a/0xa20 [ 2325.147672] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.148981] kmem_cache_alloc_bulk+0x168/0x320 [ 2325.150150] io_submit_sqes+0x6fe6/0x8610 [ 2325.151253] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2325.152591] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2325.153822] ? find_held_lock+0x2c/0x110 [ 2325.154859] ? io_submit_sqes+0x8610/0x8610 [ 2325.155972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2325.157225] ? wait_for_completion_io+0x270/0x270 [ 2325.158451] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.159628] ? vfs_write+0x354/0xb10 [ 2325.160584] ? fput_many+0x2f/0x1a0 [ 2325.161507] ? ksys_write+0x1a9/0x260 [ 2325.162472] ? __ia32_sys_read+0xb0/0xb0 [ 2325.163506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.164839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.166149] do_syscall_64+0x33/0x40 [ 2325.167093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2325.168394] RIP: 0033:0x7fa8c8de3b19 [ 2325.169350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.173941] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2325.175978] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2325.177734] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2325.179398] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.181088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.182857] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:05:01 executing program 2: r0 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) socket$inet(0x2, 0xa, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000001000000181100000f30ab40d8cc9939db32f07db823267ede501077f35992b42b3039a9ef7c570c2fce855d9a8ead5cfe4ccdf31928eb87ca9a1353641c7ac168080d3f8d9a3743a009560a44e8da049a3621c645a328b1ca50459cb90b0bb143098ff59f7bfcc49a1b9f99ad35f289b6d98c9fb64b21d0317872854513a9c97b91030314f36414296ee47fc48ddab0cd3fa7eb37", @ANYBLOB="efa0e6101cb8af1189ba7252b522b6005bab6c6835de7abc5432201378cc5d23c5765885f4d23fa4afd52c193d3511e1a9ab6b99c5343757b19ea70c20547494c13b0539b85a2df6966017c6204733b598eabc835be46e360d5e71fbe23a885ce3b7c138e97f724738f7d04be54aa645b5b6f5752ebdd6d76bce0a095c79", @ANYBLOB="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"]) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x8917, &(0x7f00000001c0)={'xfrm0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xc8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0xffffffffffffffe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x4, 0xc4, 0x0, 0x401, 0x28, @local, @empty, 0x1, 0x40, 0x1ff0, 0x101}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x647a, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2, 0x69, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x6004, @fd_index=0x9, 0x6, 0x2, 0x1, 0x18, 0x0, {0x2, r6}}, 0x8001) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000000c0)={'veth0_virt_wifi\x00', {0x2, 0x0, @empty}}) 00:05:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0800000266696c653097a399d07340fc"]) socket$inet(0x2, 0x3, 0xff) r1 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 00:05:01 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:02 executing program 6: statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000100)=0x4, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="9572be4acf", 0xfe03}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffffc9, 0xcd08, 0x0, 0xfffffffffffffed7) [ 2325.368079] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:05:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x40000, 0x0) chroot(&(0x7f0000000280)='.\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') [ 2325.428011] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:05:02 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x800, 0xfb) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x56c3) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) fstatfs(r2, &(0x7f0000000000)=""/182) fcntl$setlease(r1, 0x400, 0x0) r3 = socket$inet(0x2, 0x4, 0x5) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:05:18 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:18 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x8}], 0x0, &(0x7f0000001400)={[{@abort}, {@jqfmt_vfsv0}]}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4d0000, 0x40) 00:05:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x40, 0x114) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000120031cd00000000000001000a000000090000005ef6a6516b012000"], 0x20}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fcntl$getown(r6, 0x9) sendmsg$nl_generic(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x12b0, 0x32, 0x400, 0x70bd29, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x8e, 0x0, 0x0, @pid}, @nested={0x15a, 0x3b, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="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", @typed={0x8, 0x87, 0x0, 0x0, @uid=r8}, @generic="af313566c80c994c81f11cca741f62138bdc24cd612d095a0f6627762d7267b571762e67c2d41fd3009a0be8a672b95b21a140b9a6c1e2833ff2f58c804f8970068cfbe1bcf0f934df57"]}, @nested={0x1108, 0x36, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r9}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0xffff}, @typed={0x4, 0x55}, @generic="27e5a60f22423c2828db17e980aec02cbf48946a749e96322c2e3472d7f5582a61d74a5f2da6d047075b10adeb310bbcad630a8efef2ea31545c7aa054cbec96165da9ec35b296ae784665f70204c1cc928cdd3a98e81b6702869162008ace1f92c22a5ab0bc32bdc1f8a05dd1270a468b9b644da6f4cdfe268bc729ce64c67a15e0df11759237", @typed={0x6, 0x8b, 0x0, 0x0, @str=',\x00'}, @generic="0b3b642d25d905ff77c39083d0190ded1d40569d41ab29923ce33b0a1f8c9329a48bddf806f4f7a176bf9be648995581f9a24bd0fd9b1c8d470187bee9d8dc5dca59cd14dd9b63a84420b2c4e7", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x6a}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x6}]}, @nested={0x24, 0x6b, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0xba}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x5ac8faa2}]}, 0x12b0}}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x464, 0x1e, 0x200, 0x70bd27, 0x25dfdbfb, {0x2}, [@generic="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", @typed={0x4, 0x21}, @nested={0x82, 0x7e, 0x0, 0x1, [@generic="fde047362ffcac15be90cbd31128adcf492c3be750ab7d92781069314257f8dfaeb8016c6d8ed69342cb999e30cdadb3f1734a2655929b7545f18c526568a572530b1a93c780b3aabd8275b94b084c26", @typed={0x4, 0x5d}, @generic="1806bf1dfc68d850ed70591fb2eeb6595a8c5051d3a8a1fa7b76", @typed={0x6, 0x6e, 0x0, 0x0, @str=':\x00'}, @typed={0x8, 0xe, 0x0, 0x0, @uid=r8}]}, @typed={0x8, 0x6f, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0x9}, @nested={0x2b8, 0x71, 0x0, 0x1, [@typed={0xc, 0x6c, 0x0, 0x0, @u64=0x69}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x52, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x11, 0x0, 0x0, @pid}, @generic="ef3d262425116519e669a8c8e7dee11039676e87403e52d9f9a60980b3d1481b64db206e9bd8cce7769f70d590b474c0e7c5d71f91947c5dd17ff71f04679a877ec5832c426145ca85f65ed9076c84617529b31a1276560a0a5e56b916180428649ab280951a58eac9afe2450ded94f233faa5072f2bc4cea07bbf3bd0fad47597814e6b2cfb1e63161e2d6efef38a2ac8187f5d5e6e43ef5678a4690f8a4a07cca2f171605502ba2eeb43d3266ee3b0a050485e838cb281ba08b68264543bc1068d87c4d71edfd838b2e10a20358ee6b9c9f599bfeec8f2358ceb", @generic="d56d7d30d2bbaf67a773bdbd508a2f8753121d0694e96dbc72cf82a33b7d1f15054ad818e562be10f9a726b9f588af3bc67dd274c5ae1b6f700380f63f8f102b907f4c2ac9d7b007b696e788272460f6fc4d2d1fa7e79803323317be5c2a299ae2ed2f907067e132080dd9bf45d9fd2ccba1d4d0e94ea9ab262c8af43337490b2997178b6dda67a9948211fb3f8aed935972571666575ef92d619573b3ecb39425a97c8df6298dd671e573ed7306e49a50b3b4edab2622311d1863ac3a42f1da5e3edf33ec0afbbf369b4586b359d8ff7f5d40f2ca4b3f640d30d29dd9832ccc1151850876e8fcf17917", @generic="3f618d8f76ff844de101d8ce8160b843dd6b8602b258534557f48b8e1df04e30a0fae8bdf511be7425690691e1a7acb5713f5d5af01cf796e12e7b2e124e72184425ff113260d6d231b1fe47928cb961cc2daccf50b4", @typed={0xc, 0x66, 0x0, 0x0, @u64=0x8}, @generic="bb48e59f4c6e6636afd6dd0f98fd40a5c2078d2b987fd0d20952c6ce978e52866df9dfe1d9618115ed22ee07bbdffbf40e5f0fc40d9632bd1a162b1b62fe8513ae18b9828e291a7cf35c36afbd4d7885022f2be1a401064944a128540d6e53ac87be093442646b0c77"]}]}, 0x464}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fchownat(r0, &(0x7f0000000040)='./file1\x00', 0xee00, 0x0, 0x400) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:05:18 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:18 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:05:18 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0xa, 0x9, 0x0, 0x9, 0x2}, 0x2) socket$inet(0x2, 0xa, 0x3) ioctl$FIONCLEX(r0, 0x5450) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:05:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc200063b) creat(0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r5 = dup2(r1, r4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) openat(r5, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) creat(0x0, 0x0) 00:05:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x4b84, 0xb7e1, 0x3, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x1, 'bridge0\x00', {}, 0x8}) [ 2341.514714] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2341.572768] FAULT_INJECTION: forcing a failure. [ 2341.572768] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.575406] CPU: 0 PID: 12412 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2341.577019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.578964] Call Trace: [ 2341.579587] dump_stack+0x107/0x167 [ 2341.580438] should_fail.cold+0x5/0xa [ 2341.581347] ? xas_alloc+0x336/0x440 [ 2341.582247] should_failslab+0x5/0x20 [ 2341.583129] kmem_cache_alloc+0x5b/0x310 [ 2341.584088] xas_alloc+0x336/0x440 [ 2341.584921] xas_create+0x34a/0x10d0 [ 2341.585825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2341.587041] xas_store+0x8c/0x1c40 [ 2341.587893] __xa_store+0x164/0x2d0 [ 2341.588744] ? xa_delete_node+0x280/0x280 [ 2341.589734] ? trace_hardirqs_on+0x5b/0x180 [ 2341.590746] xa_store+0x31/0x50 [ 2341.591499] __io_uring_add_tctx_node+0x1cf/0x520 [ 2341.592615] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2341.593886] __do_sys_io_uring_enter+0x146f/0x1890 [ 2341.595032] ? find_held_lock+0x2c/0x110 [ 2341.595990] ? io_submit_sqes+0x8610/0x8610 [ 2341.597011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2341.598191] ? wait_for_completion_io+0x270/0x270 [ 2341.599341] ? rcu_read_lock_any_held+0x75/0xa0 [ 2341.600430] ? vfs_write+0x354/0xb10 [ 2341.601334] ? fput_many+0x2f/0x1a0 [ 2341.602179] ? ksys_write+0x1a9/0x260 [ 2341.603069] ? __ia32_sys_read+0xb0/0xb0 [ 2341.604025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.605252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.606490] do_syscall_64+0x33/0x40 [ 2341.607377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.608604] RIP: 0033:0x7fa8c8de3b19 [ 2341.609466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.613840] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2341.615627] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2341.617297] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2341.618957] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.620626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.622300] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 [ 2341.627548] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:05:18 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824", 0x31, 0xb800}], 0x0, &(0x7f0000000180)) r0 = socket$inet(0x2, 0x2, 0x4) connect(r0, &(0x7f0000000240)=@nfc={0x27, 0x0, 0x2, 0x5}, 0x80) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x4) 00:05:18 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:18 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x0, 0xfffffffe) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) 00:05:18 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2341.806965] FAULT_INJECTION: forcing a failure. [ 2341.806965] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.808849] CPU: 1 PID: 12424 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2341.809726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.810709] Call Trace: [ 2341.811029] dump_stack+0x107/0x167 [ 2341.811471] should_fail.cold+0x5/0xa [ 2341.811941] should_failslab+0x5/0x20 [ 2341.812415] kmem_cache_alloc_bulk+0x4b/0x320 [ 2341.812964] io_submit_sqes+0x6fe6/0x8610 [ 2341.813483] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2341.814087] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2341.814692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.815326] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2341.815875] ? trace_hardirqs_on+0x5b/0x180 [ 2341.816403] ? io_submit_sqes+0x8610/0x8610 [ 2341.816942] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2341.817497] ? finish_task_switch+0x126/0x5d0 [ 2341.818037] ? finish_task_switch+0xef/0x5d0 [ 2341.818583] ? __switch_to+0x572/0xf70 [ 2341.819058] ? __switch_to_asm+0x3a/0x60 [ 2341.819556] ? __switch_to_asm+0x34/0x60 [ 2341.820043] ? __schedule+0x82c/0x1ea0 [ 2341.820522] ? io_schedule_timeout+0x140/0x140 [ 2341.821097] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2341.821649] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2341.822296] ? ksys_write+0x1a9/0x260 [ 2341.822776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.823393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.824059] do_syscall_64+0x33/0x40 [ 2341.824506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2341.825149] RIP: 0033:0x7fa8c8de3b19 [ 2341.825608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.827867] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2341.828785] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2341.829652] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2341.830536] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.831408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.832274] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:05:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4566adfa, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x4e, 0x0, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) sendfile(r2, r0, 0x0, 0x4000007ffffffc) socket$inet(0x2, 0x3, 0xff) 00:05:38 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x4, 0x1800}, {0x2, 0x4, 0x1000}], 0x2, &(0x7f0000000180)={r0, r1+10000000}) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x5) ftruncate(r2, 0x8800000) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000080)=""/200, 0x20000148}], 0x1, 0x0, 0x0) 00:05:38 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:05:38 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f0000000140)={'ip6erspan0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)) r2 = socket$inet(0x2, 0xa, 0x0) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @multicast2}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000cab78cbf9b1d569fbb51545f727dba5df1bb1e8c0bd91d38b092b2c8d59f8ff91e067599f631456a2a6ace69a736cca1d76f45064776df88ac1411d3bb5aaa02d7f80b6767c1d97f1864529e6962b76e921115824eb228990f51206df29bda8b0e80a34800720b618532a0cde589cab4b979f2f65c809d2038aa6e7ebc83f88eba29cb606abb51dccb70a840b71989298f8d23bd913425d89b6c9c386705cf318dde266b4dfe0a4e1808e0066cc55863844c3ca87a1e7b273b1a0ecb9d2db24d9a267d8d098777a50f5c9dff004081d0af36fe280000000000", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653000"]) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0xfffffffa, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x90942, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f00000000c0)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) fcntl$setlease(r5, 0x400, 0x2) 00:05:38 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x84080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4, 0x3f, 0x0, 0xffffffff, 0x802}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1423ac0021fbff092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8c25b5ac6e68a732725035c47bb9f6eef0108f879e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a469d309472fdafad9501d62fa67670b7d46ea1384217d0f48f0a1ce5690e842544456d6eb93796473b3edc007ac9fc418f7e53c5e4780ad41e8491cc6dd9d5ac64dabb299eaa88904fbae51e91a2e0c6000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2cc, 0x1f, 0x400, 0x70bd25, 0x25dfdbfc, {0x13}, [@generic="36d1b0406cfa93e3f9c79182deefa3d52a128f411a8f5151f626a8a9400e8916e1eb3c5f2acd4d1cfd581a4568f856bdbd5b09487912b53dc23ee8df592dde516d9dbf2334b99bf3698af47f25cb8ed912d276c60e8adb4f9f79cb451755ae4ef056628286b585aacd5ff40d63ec50f3376a5e395a262ee54a8e88baace149a9f2ddf00e69b34a798f221eadc526c98133d9442bfea621357011d34c68d00849e21a8819def5caf79aeac7b47169367a7a9fe47b56d983d4eded7e180c9802718cea2ab0f99e9ce401c3cb6e35524855dc24fa48deaf4ceaf6", @nested={0xe6, 0x19, 0x0, 0x1, [@generic="c6c877363a0b029a7532b72e3d1a785137daa751b3cdf7f730b935bc46c0ee073da7817413e4d2a078ee7db0f30d007e8c4c6dffd8921d85c27567b5455407e245b7d2de081a582fbd7a5095d4943d95789ed29749eb4ea3c7945982e5524892b589dd6c869acc8549ecf24c49530c50511ad2788e07fbd1fa289b36a57db96de152ff0986959af8ff3a10d6447620bdac2298afc87b0bbdfe654f74803b34baaa035a", @generic="21766e2585798d368c3110bd8962770c19716a216103743559688679b1c3d0cc731c716baad411fdffa45ed1b60d65344aaad95bf013979b6a0e0ab4b0a71c"]}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@private1}, @nested={0xdf, 0x71, 0x0, 0x1, [@generic="93a9237676979fafd8aa8f4427b8ce46f3b59aaddb08654acfb796f3f88b8dd0826248401fb6a0662cd3aa24702d1f58e52d9d1167096f5322486bcafbeeb2af51d6f4341cbb0f09783344d97481cbdd3500b1e9324387ca73cfb4f688d5c6d0690d7ff981a2e40a99b346bc6c7dc5b5e6852f431a9ed33009754db9198b1214b7ed889ca361172160881f6780d65829075ef342cf3b02151bee6d86d71505787805b243791d99043139a11bdce099a3df206c", @typed={0x4, 0x63}, @generic="ae9ecf5f12c122d59ef7202f7ede5df3b2c2bd06009c9ea8e333811ff9e229f2c9b795fa"]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x9000}, 0x20040021) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) unshare(0x48020200) 00:05:38 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:38 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2362.352845] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2362.365626] FAULT_INJECTION: forcing a failure. [ 2362.365626] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.368175] CPU: 0 PID: 12462 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2362.369775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2362.371647] Call Trace: [ 2362.372268] dump_stack+0x107/0x167 [ 2362.373116] should_fail.cold+0x5/0xa [ 2362.374011] ? xas_alloc+0x336/0x440 [ 2362.374882] should_failslab+0x5/0x20 [ 2362.375765] kmem_cache_alloc+0x5b/0x310 [ 2362.376715] xas_alloc+0x336/0x440 [ 2362.377545] xas_create+0x34a/0x10d0 [ 2362.378435] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2362.379656] xas_store+0x8c/0x1c40 [ 2362.380502] __xa_store+0x164/0x2d0 [ 2362.381348] ? xa_delete_node+0x280/0x280 [ 2362.382334] ? trace_hardirqs_on+0x5b/0x180 [ 2362.383348] xa_store+0x31/0x50 [ 2362.384117] __io_uring_add_tctx_node+0x1cf/0x520 [ 2362.385236] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2362.386477] __do_sys_io_uring_enter+0x146f/0x1890 [ 2362.387614] ? find_held_lock+0x2c/0x110 [ 2362.388562] ? io_submit_sqes+0x8610/0x8610 [ 2362.389576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2362.390706] ? wait_for_completion_io+0x270/0x270 [ 2362.391830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2362.392905] ? vfs_write+0x354/0xb10 [ 2362.393768] ? fput_many+0x2f/0x1a0 [ 2362.394621] ? ksys_write+0x1a9/0x260 [ 2362.395504] ? __ia32_sys_read+0xb0/0xb0 [ 2362.396447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2362.397659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2362.398862] do_syscall_64+0x33/0x40 [ 2362.399726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2362.400913] RIP: 0033:0x7fa8c8de3b19 [ 2362.401774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2362.406046] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2362.407810] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2362.409469] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2362.411127] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2362.412779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2362.414449] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 [ 2362.478843] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:05:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000000280)=""/156, 0x9c, 0x63, 0x0, 0x0) 00:05:39 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:39 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddbdf257f0000000c009900950300005800000014005500815176bb8b600e007145ef9dcd489b1eb02e060048001400"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20044044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x48, r1, 0x2, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}}, 0x0) 00:05:39 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:05:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00013f", 0x30, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, 'A3t', 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/128, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) r6 = dup2(r2, r5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) unlinkat(r6, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:05:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:39 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0xa7ffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2363.037465] FAULT_INJECTION: forcing a failure. [ 2363.037465] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.040471] CPU: 0 PID: 12497 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2363.041962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.043742] Call Trace: [ 2363.044313] dump_stack+0x107/0x167 [ 2363.045097] should_fail.cold+0x5/0xa [ 2363.045929] ? create_object.isra.0+0x3a/0xa20 [ 2363.046913] should_failslab+0x5/0x20 [ 2363.047733] kmem_cache_alloc+0x5b/0x310 [ 2363.048612] ? find_held_lock+0x2c/0x110 [ 2363.049499] create_object.isra.0+0x3a/0xa20 [ 2363.050448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2363.051546] __kmalloc_node+0x1ae/0x420 [ 2363.052393] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2363.053475] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2363.054553] kmem_cache_alloc_bulk+0x182/0x320 [ 2363.055532] io_submit_sqes+0x6fe6/0x8610 [ 2363.056449] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2363.057506] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2363.058549] ? find_held_lock+0x2c/0x110 [ 2363.059419] ? io_submit_sqes+0x8610/0x8610 [ 2363.060349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2363.061379] ? wait_for_completion_io+0x270/0x270 [ 2363.062418] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.063406] ? vfs_write+0x354/0xb10 [ 2363.064203] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2363.065176] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2363.066332] ? ksys_write+0x1a9/0x260 [ 2363.067144] ? __ia32_sys_read+0xb0/0xb0 [ 2363.068015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.069127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.070233] do_syscall_64+0x33/0x40 [ 2363.071027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2363.072117] RIP: 0033:0x7fa8c8de3b19 [ 2363.072909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.076831] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2363.078449] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2363.079953] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2363.081456] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.082966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.084479] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:05:39 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="180427bd7000fbdbdf251f0000000c00060000000000000000000c000600010000000100000008000300", @ANYRES32=r1, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300926cd180add569c95c38b80019648e9b290dd025564c41fd4bff77935c30cef767ff4130a838a720f7329fb4eee5b21a95377b8a115ed5f0ed24a124763929d108477c3d527003ecfa3930fa0d899bad0359f18b5151be305d4b8ef2911d444217fa611b86a971c526755f124da5615b6390f06e136c7a56d99dbb39402ab77441ec", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c80), r0) socketpair(0x9, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xb, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 00:05:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000001540)={{0x6, 0x1}, 0x0, 0xffff, 0x9, {0x6b, 0x2}, 0x40, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x4, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001480), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001600)={0x7, 0xfff, 0x0, 0x8, 0x5}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0xfff}, 0x68) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/4096}) unshare(0x48020200) 00:05:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:39 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0xffffffa7, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x581043, 0x12) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000100000000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r0 = socket$inet(0x2, 0x3, 0xff) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000140)={'U-', 0x81}, 0x16, 0x2) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = getpgrp(0x0) r4 = pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r4, 0x0, 0x802) read(r4, &(0x7f0000000240)=""/143, 0x8f) [ 2363.244051] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2363.285803] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:05:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="01a64365db6ce0790e000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socket$inet(0x2, 0x5, 0xf797) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:05:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) r1 = socket$inet(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000040)={0x7, 'geneve0\x00', {0x4}, 0x1}) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:05:57 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:05:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0xff, 0xdb87c980d27967be) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5d02bcc01b978efa551c3f24187f1d20e0d6ff5e88c81a312c642ed4c228ee76aca2c0a63898ca8239f65b7866d68dcfabb21f28325de3f732ff72df0324c6a7889baf49ebb51fdddb98", @ANYRES16=0x0, @ANYBLOB="000b26bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x402) r1 = accept$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000000)=0x6e) getsockname(r1, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000300)=0x80) socket$inet_udplite(0x2, 0x2, 0x88) 00:05:57 executing program 6: mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0x0, 0x300) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) getsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat(0xffffffffffffffff, 0x0, 0x185000, 0xea) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 00:05:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x68000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:05:57 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:57 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:05:57 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x6, 0x1f, 0xe0, 0x0, 0xfffffffffffffff8, 0x400, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x8}, 0x90, 0x100, 0x1000, 0x5, 0x80, 0x1, 0x3f, 0x0, 0x8, 0x0, 0x6}, r1, 0x9, r4, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x8000) read$eventfd(r5, &(0x7f0000000000), 0x8) [ 2380.651621] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2380.688189] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2380.815186] FAULT_INJECTION: forcing a failure. [ 2380.815186] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.817915] CPU: 0 PID: 12569 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2380.819610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.821600] Call Trace: [ 2380.822239] dump_stack+0x107/0x167 [ 2380.823137] should_fail.cold+0x5/0xa [ 2380.824066] ? xas_alloc+0x336/0x440 [ 2380.824978] should_failslab+0x5/0x20 [ 2380.825899] kmem_cache_alloc+0x5b/0x310 [ 2380.826911] xas_alloc+0x336/0x440 [ 2380.827770] xas_create+0x34a/0x10d0 [ 2380.828689] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2380.829957] xas_store+0x8c/0x1c40 [ 2380.830840] __xa_store+0x164/0x2d0 [ 2380.831714] ? xa_delete_node+0x280/0x280 [ 2380.832736] ? trace_hardirqs_on+0x5b/0x180 [ 2380.833783] xa_store+0x31/0x50 [ 2380.834620] __io_uring_add_tctx_node+0x1cf/0x520 [ 2380.835772] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2380.837087] __do_sys_io_uring_enter+0x146f/0x1890 [ 2380.838256] ? find_held_lock+0x2c/0x110 [ 2380.839263] ? io_submit_sqes+0x8610/0x8610 [ 2380.840299] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2380.841467] ? wait_for_completion_io+0x270/0x270 [ 2380.842652] ? rcu_read_lock_any_held+0x75/0xa0 [ 2380.843784] ? vfs_write+0x354/0xb10 [ 2380.844697] ? fput_many+0x2f/0x1a0 [ 2380.845590] ? ksys_write+0x1a9/0x260 [ 2380.846513] ? __ia32_sys_read+0xb0/0xb0 [ 2380.847511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2380.848762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2380.850028] do_syscall_64+0x33/0x40 [ 2380.850943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2380.852199] RIP: 0033:0x7fa8c8de3b19 [ 2380.853122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2380.857600] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2380.859442] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2380.861176] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2380.862930] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2380.864664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2380.866410] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:05:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2381.016216] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:06:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='wlan0\x00', 0x7, 0x100000001, 0x5}) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) 00:06:13 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:13 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:06:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x74000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_delete(r0) timer_delete(0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clone3(&(0x7f0000000880)={0x20000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0xd}, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/224, &(0x7f0000000840)=[0xffffffffffffffff], 0x1}, 0x58) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="769e5f2a"], 0x4, 0x92a84b769ae0e8dc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r2}, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600410d00"/20], 0x14}}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x4}, &(0x7f0000000600)=0x0) timer_gettime(r3, &(0x7f0000000700)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:06:13 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x1d, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@multicast, @local, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "004ae69c7c4765c9"}}}}, &(0x7f0000000200)={0x0, 0x3, [0x9e, 0xb95, 0x49, 0x9b8]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_emit_ethernet(0xfd, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@mpls_mc={0x8848, {[{0xff}, {0x2}, {0xd2b, 0x0, 0x1}], @ipv4=@udp={{0xd, 0x4, 0x2, 0x0, 0xe3, 0x68, 0x0, 0x6, 0x11, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x10, 0x42, 0x0, 0x9, [0x3, 0x0, 0x2]}, @timestamp={0x44, 0xc, 0x3b, 0x0, 0xc, [0xfffffffd, 0x3]}, @noop]}}, {0x4e21, 0x4e23, 0xaf, 0x0, @gue={{0x2, 0x0, 0x3, 0x30, 0x100}, "18d3c968334416ed206be835f499dc8b854e1bc165a90ce6007a2c53579d40f4bf9a754a0a5b90535a0c069571c05631955f7437644db3cfd8a142e9155716182f4d1794a59909166e4956146e528f3e29fd1dc5dbb40da75c1989f50e14438afd030295c6d13d529229d7077e2b0aacd8498fe14d363a14ee1b08a11d33170ad71007bc0d153fbc7a7f8773406fbf439f1fe5c559cba1b3ae755e44bad49a"}}}}}}}, &(0x7f0000000140)={0x0, 0x1, [0x98f, 0xb8b, 0x5a0, 0x6e7]}) r1 = getpgrp(0x0) getpriority(0x0, r1) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) recvmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/9, 0x9}], 0x1, &(0x7f0000000480)=""/103, 0x67}, 0x6}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/232, 0xe8}], 0x1}, 0x1540da30}], 0x2, 0x2, &(0x7f0000000740)={0x0, 0x989680}) setpgid(r0, r0) ptrace(0xffffffffffffffff, r0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x37f, 0xca4}, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:06:13 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:13 executing program 6: r0 = creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') fsmount(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$incfs(r1, &(0x7f0000000280)='.log\x00', 0x200, 0x16) r3 = fsmount(r0, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x20400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@access_user}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x200000}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsroot}, {@subj_type}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, ')/'}}]}}) [ 2397.017194] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2397.040689] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2397.217927] FAULT_INJECTION: forcing a failure. [ 2397.217927] name failslab, interval 1, probability 0, space 0, times 0 [ 2397.220536] CPU: 1 PID: 12612 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2397.221987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2397.223741] Call Trace: [ 2397.224309] dump_stack+0x107/0x167 [ 2397.225082] should_fail.cold+0x5/0xa [ 2397.225903] ? create_object.isra.0+0x3a/0xa20 [ 2397.226868] should_failslab+0x5/0x20 [ 2397.227683] kmem_cache_alloc+0x5b/0x310 [ 2397.228541] ? mark_held_locks+0x9e/0xe0 [ 2397.229399] create_object.isra.0+0x3a/0xa20 [ 2397.230338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2397.231426] kmem_cache_alloc+0x159/0x310 [ 2397.232316] xas_alloc+0x336/0x440 [ 2397.233068] xas_create+0x34a/0x10d0 [ 2397.233869] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2397.234960] xas_store+0x8c/0x1c40 [ 2397.235747] __xa_store+0x164/0x2d0 [ 2397.236516] ? xa_delete_node+0x280/0x280 [ 2397.237408] ? trace_hardirqs_on+0x5b/0x180 [ 2397.238340] xa_store+0x31/0x50 [ 2397.239060] __io_uring_add_tctx_node+0x1cf/0x520 [ 2397.240149] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2397.241345] __do_sys_io_uring_enter+0x146f/0x1890 [ 2397.242463] ? find_held_lock+0x2c/0x110 [ 2397.243400] ? io_submit_sqes+0x8610/0x8610 [ 2397.244395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2397.245464] ? wait_for_completion_io+0x270/0x270 [ 2397.246510] ? rcu_read_lock_any_held+0x75/0xa0 [ 2397.247505] ? vfs_write+0x354/0xb10 [ 2397.248290] ? fput_many+0x2f/0x1a0 [ 2397.249051] ? ksys_write+0x1a9/0x260 [ 2397.249853] ? __ia32_sys_read+0xb0/0xb0 [ 2397.250725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2397.251952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2397.253282] do_syscall_64+0x33/0x40 [ 2397.254248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2397.255621] RIP: 0033:0x7fa8c8de3b19 [ 2397.256576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2397.260974] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2397.262942] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2397.264781] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2397.266517] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2397.268285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2397.269881] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:06:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:14 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0xa7ffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:14 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000dd130398de7b6c898e8565e905db93f9135799327ae279dcc2476d25f0156399ce69eac6cf029576b5f65a1106e005be8b9927ea8dab1e11f0e36e954a75a305ca2d", @ANYRES16=r2, @ANYBLOB="5d6d000000002100000009001f16706f7931000084b14950bff0c65f00000c0005000000000000000000"], 0x34}}, 0x0) 00:06:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x97ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf741}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc0", 0xb}], 0x1}, 0x0, 0x4000000}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000001e20002e0f0ffd6ca8af08"]) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:06:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000140)={[{@utf8}, {@shortname_lower}]}) r0 = gettid() ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000400)={0x30, 0x1, 0x2}) r1 = fspick(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x8a0030, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="2c6163636573733d757365722c76657273696f6e3d3970323030302e4c2c6d6d61702c6163636573732c7375626a5f726f6c653d757466383d312c7569643d000000002a8b", @ANYRESDEC, @ANYBLOB=',\x00']) setpriority(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x5, 0x1, 0xff, 0x8, 0x1, 0x43}, 0x20) 00:06:32 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0xffffffa7, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:06:32 executing program 2: r0 = io_uring_setup(0x629, &(0x7f00000003c0)) execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x868, 0x103) io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x8, 0x800}) [ 2415.574654] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2415.698738] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2415.730234] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2415.747618] FAULT_INJECTION: forcing a failure. [ 2415.747618] name failslab, interval 1, probability 0, space 0, times 0 [ 2415.750510] CPU: 0 PID: 12665 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2415.752156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2415.754235] Call Trace: [ 2415.754902] dump_stack+0x107/0x167 [ 2415.755834] should_fail.cold+0x5/0xa [ 2415.756781] ? xas_alloc+0x336/0x440 [ 2415.757718] should_failslab+0x5/0x20 [ 2415.758671] kmem_cache_alloc+0x5b/0x310 [ 2415.759701] xas_alloc+0x336/0x440 [ 2415.760605] xas_create+0x34a/0x10d0 [ 2415.761560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2415.762874] xas_store+0x8c/0x1c40 [ 2415.763808] __xa_store+0x164/0x2d0 [ 2415.764724] ? xa_delete_node+0x280/0x280 [ 2415.765754] ? trace_hardirqs_on+0x5b/0x180 [ 2415.766827] xa_store+0x31/0x50 [ 2415.767650] __io_uring_add_tctx_node+0x1cf/0x520 [ 2415.768851] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2415.770164] __do_sys_io_uring_enter+0x146f/0x1890 [ 2415.771387] ? find_held_lock+0x2c/0x110 [ 2415.772408] ? io_submit_sqes+0x8610/0x8610 [ 2415.773482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2415.774663] ? wait_for_completion_io+0x270/0x270 [ 2415.775868] ? rcu_read_lock_any_held+0x75/0xa0 [ 2415.777002] ? vfs_write+0x354/0xb10 [ 2415.777915] ? fput_many+0x2f/0x1a0 [ 2415.778808] ? ksys_write+0x1a9/0x260 [ 2415.779745] ? __ia32_sys_read+0xb0/0xb0 [ 2415.780746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2415.782029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2415.783287] do_syscall_64+0x33/0x40 [ 2415.784209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2415.785445] RIP: 0033:0x7fa8c8de3b19 [ 2415.786349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.790819] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2415.792693] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2415.794506] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2415.796279] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.797990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2415.799728] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:06:32 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000120031cd00000000000001000a000000090000005ef6a6516b012000"], 0x20}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000001e00)={0x1354, 0x32, 0x400, 0x70bd29, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x8e, 0x0, 0x0, @pid}, @nested={0x200, 0x3b, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="79e1da6e346ca475abc84afe0f37af100b132845fe53d1454dd5ae4134bfae90f42113428620bba6a5b070cb12d7cde5a8ef6d656ee5ad4e92b64d6e5fffc10a16360c61cf9ed0a3a7121d20d9ebac9987ea8d261d2c1682d4ca8536fc118cc284a1acee7bf36aed76c001b067172aba7eafa4fd4d606da00b507a1b7e874740cf283f3a36e5dec0982e9384b33dad75c8368ee87552234c8c18a06d89463dc38151e46051e6f43956d469dcbf8602d282bb6638ef235d17b9feaff614f67328b81734f468e1b7b90335f8e7f858ebab166ec279510ac26f206258a288ec6965ef5a1ca540b41fc7e93a91a333887efaffe3e0133a56f17ab3d10754", @typed={0x8, 0x87, 0x0, 0x0, @uid=r2}, @typed={0xf0, 0x5f, 0x0, 0x0, @binary="e91facfb86abcaf389e4ecdaf62d61961b169b3096b38bf468f96e7bee50a41db2f039b2a96187ec12fe0ae54694779f8c414661458a42142ed01a4895bc342ac28f6f3a3fc3325d4c2abcd78f8cffc90ec6df89008a2c14b2bf17ab4b9ac8a6aa8621baeccc7b577021ddf5048e73c9f98aba12282a2edc36792777d9b0c693882a94110845763118fbf2c9eeb448519875ddb24064fa52da4b3c8efe533be5e3123086bd3fb2189c3e56865f1bf0ee4c5eb2a4f59c6350bb1ebef6671507d1be62ca5b6afcfbf4986680a83bc54e31a75c612c47f0093524f2fbce74eca16a8ce4a3631f20095004076fcf"}]}, @nested={0x1108, 0x36, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0xffff}, @typed={0x4, 0x55}, @generic="27e5a60f22423c2828db17e980aec02cbf48946a749e96322c2e3472d7f5582a61d74a5f2da6d047075b10adeb310bbcad630a8efef2ea31545c7aa054cbec96165da9ec35b296ae784665f70204c1cc928cdd3a98e81b6702869162008ace1f92c22a5ab0bc32bdc1f8a05dd1270a468b9b644da6f4cdfe268bc729ce64c67a15e0df11759237", @typed={0x6, 0x8b, 0x0, 0x0, @str=',\x00'}, @generic="0b3b642d25d905ff77c39083d0190ded1d40569d41ab29923ce33b0a1f8c9329a48bddf806f4f7a176bf9be648995581f9a24bd0fd9b1c8d470187bee9d8dc5dca59cd14dd9b63a84420b2c4e7", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x6a}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x6}]}, @nested={0x24, 0x6b, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0xba}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x5ac8faa2}]}, 0x1354}}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa01040, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'interleave'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r2}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'mpol'}}, {@euid_gt={'euid>', r2}}, {@dont_hash}]}) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 00:06:32 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000001c0)=""/251, 0xfb}], 0x3, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xf8}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/92, 0x5c}], 0x2, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000002c00)=[{&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/14, 0xe}, {&(0x7f0000001900)=""/52, 0x34}, {&(0x7f0000001940)=""/109, 0x6d}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/237, 0xed}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/72, 0x48}], 0x9, &(0x7f0000002cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002dc0)=""/21, 0x15}, {&(0x7f0000002e00)=""/89, 0x59}, {&(0x7f0000002e80)=""/197, 0xc5}, {&(0x7f0000002f80)=""/81, 0x51}, {&(0x7f0000003000)=""/31, 0x1f}, {&(0x7f0000003040)=""/126, 0x7e}], 0x6}}], 0x4, 0x2020, &(0x7f0000003240)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1d, 0x20, 0x9, 0x0, 0x0, 0xda4c, 0x800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp, 0x2447, 0x13f8000000000000, 0x4, 0x5, 0x8, 0x8, 0x3, 0x0, 0x3, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@broadcast}, {@broadcast}]}]}}}], 0x28}}], 0x1, 0x0) 00:06:32 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:32 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0xa7ffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2415.959120] FAT-fs (loop5): Directory bread(block 64) failed [ 2415.972804] FAT-fs (loop5): Directory bread(block 65) failed [ 2415.981442] FAT-fs (loop5): Directory bread(block 66) failed [ 2415.995128] FAT-fs (loop5): Directory bread(block 67) failed 00:06:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2416.005877] FAT-fs (loop5): Directory bread(block 68) failed [ 2416.015129] FAT-fs (loop5): Directory bread(block 69) failed [ 2416.024188] FAT-fs (loop5): Directory bread(block 70) failed [ 2416.033804] FAT-fs (loop5): Directory bread(block 71) failed [ 2416.043207] FAT-fs (loop5): Directory bread(block 72) failed [ 2416.061090] FAT-fs (loop5): Directory bread(block 73) failed 00:06:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x1a, 0x0, "8f8e271beed1e10545cc847c6b19e0d6fa1d5e6156d8e701809aa3f556ec53a2c2116d5b1b42c5380317cfe1dad465c9752d8b336e13b815b238af52b8f32029ab24a2b0e0b671cabc525dce763d90a1"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r1, r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x36, 0x0, "57e4522f563aaa93175c40641e90e362b26e03432f9439ed67663d405590ae383c3a06995d87c24070a5eb3022be5e93351db25eae73f7b59d65f37bbb214960563c062a06fca9305ebada94c3b2618d"}, 0xd8) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 00:06:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000120031cd00000000000001000a000000090000005ef6a6516b012000"], 0x20}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000001e00)={0x1354, 0x32, 0x400, 0x70bd29, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x8e, 0x0, 0x0, @pid}, @nested={0x200, 0x3b, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="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", @typed={0x8, 0x87, 0x0, 0x0, @uid=r2}, @typed={0xf0, 0x5f, 0x0, 0x0, @binary="e91facfb86abcaf389e4ecdaf62d61961b169b3096b38bf468f96e7bee50a41db2f039b2a96187ec12fe0ae54694779f8c414661458a42142ed01a4895bc342ac28f6f3a3fc3325d4c2abcd78f8cffc90ec6df89008a2c14b2bf17ab4b9ac8a6aa8621baeccc7b577021ddf5048e73c9f98aba12282a2edc36792777d9b0c693882a94110845763118fbf2c9eeb448519875ddb24064fa52da4b3c8efe533be5e3123086bd3fb2189c3e56865f1bf0ee4c5eb2a4f59c6350bb1ebef6671507d1be62ca5b6afcfbf4986680a83bc54e31a75c612c47f0093524f2fbce74eca16a8ce4a3631f20095004076fcf"}]}, @nested={0x1108, 0x36, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0xffff}, @typed={0x4, 0x55}, @generic="27e5a60f22423c2828db17e980aec02cbf48946a749e96322c2e3472d7f5582a61d74a5f2da6d047075b10adeb310bbcad630a8efef2ea31545c7aa054cbec96165da9ec35b296ae784665f70204c1cc928cdd3a98e81b6702869162008ace1f92c22a5ab0bc32bdc1f8a05dd1270a468b9b644da6f4cdfe268bc729ce64c67a15e0df11759237", @typed={0x6, 0x8b, 0x0, 0x0, @str=',\x00'}, @generic="0b3b642d25d905ff77c39083d0190ded1d40569d41ab29923ce33b0a1f8c9329a48bddf806f4f7a176bf9be648995581f9a24bd0fd9b1c8d470187bee9d8dc5dca59cd14dd9b63a84420b2c4e7", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x6a}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x6}]}, @nested={0x24, 0x6b, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0xba}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x5ac8faa2}]}, 0x1354}}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa01040, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'interleave'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r2}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'mpol'}}, {@euid_gt={'euid>', r2}}, {@dont_hash}]}) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 00:06:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:50 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffa7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:50 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:50 executing program 6: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 00:06:50 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:06:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfaad6645, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:06:50 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x4e, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000100)=""/46, 0x2e, 0x0, &(0x7f00000001c0)={0xa, 0x6e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8003}, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c6ec5a9515c4c186f1bf1d8a5803cfc3b7d6e6f6e756d7461696c00312c73686f7270fb69ad1f5d294ce0d86e616d653d73696e6e742c756e695f786c6174653d302c7368"]) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000780)={{r0}, "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"}) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) dup3(r3, r1, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1a52a1f043cd5731, 0x0, 0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x0, 0xa, @dev={0xfe, 0x80, '\x00', 0x37}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x0, 0x2, 0x3161}}) sendfile(r5, r4, 0x0, 0x4000007ffffffc) 00:06:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "9f8ce3fd5eba33278ce4ec989be7aeef64c50e03"}, 0x15, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x2, &(0x7f0000000180)=[{0x1, 0x80, 0x9b, 0x1f}, {0x3, 0x4, 0x3f, 0xe6}]}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) lseek(r0, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="2dcadbce1e98ace8da0b4dfec1f216461337bcd377ae8319be7dd63193f293a9864d5901d97776f5aea393a769f386f38fdcf7b5cae7ca2d1efcf542964995b5ec193128d1578333cb4d78d81441041bc4cbc14e5e8a001c"], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) unshare(0x48020200) 00:06:50 executing program 1: r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = dup2(r0, r0) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x180840, 0x30) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x8c6e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x401) r8 = socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0xee01, 0xee01}}, './file0\x00'}) write$binfmt_elf64(r9, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x80, 0x0, 0x9, 0x3, 0x3, 0xfffffffa, 0x7, 0x40, 0x9c, 0x0, 0x8, 0x38, 0x1, 0x3, 0x37dd, 0x4}, [{0x70000000, 0x2, 0x3, 0xfffffffffffffffa, 0x4, 0x9, 0x8, 0x2}], "1af2b55ed035c9", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x57f) r10 = socket$inet(0x2, 0x3, 0xff) r11 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x20, 0xffffffffffffff73}, 0x0, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r11, r5, 0x0, 0x4000007ffffffc) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) [ 2433.708341] FAULT_INJECTION: forcing a failure. [ 2433.708341] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.711210] CPU: 1 PID: 12708 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2433.712700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.714474] Call Trace: [ 2433.715041] dump_stack+0x107/0x167 [ 2433.715821] should_fail.cold+0x5/0xa [ 2433.716652] should_failslab+0x5/0x20 [ 2433.717459] kmem_cache_alloc_bulk+0x4b/0x320 [ 2433.718412] io_submit_sqes+0x6fe6/0x8610 [ 2433.719325] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2433.720384] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2433.721408] ? find_held_lock+0x2c/0x110 [ 2433.722268] ? io_submit_sqes+0x8610/0x8610 [ 2433.723187] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2433.724211] ? wait_for_completion_io+0x270/0x270 [ 2433.725245] ? rcu_read_lock_any_held+0x75/0xa0 [ 2433.726224] ? vfs_write+0x354/0xb10 [ 2433.727009] ? fput_many+0x2f/0x1a0 [ 2433.727776] ? ksys_write+0x1a9/0x260 [ 2433.728588] ? __ia32_sys_read+0xb0/0xb0 [ 2433.729453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.730557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2433.730976] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2433.731642] do_syscall_64+0x33/0x40 [ 2433.731661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.731674] RIP: 0033:0x7fa8c8de3b19 [ 2433.731693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.731703] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2433.731726] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2433.731737] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2433.731749] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.731761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2433.731772] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2433.757399] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:06:50 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:06:50 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2433.862208] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2433.888899] selinux_netlink_send: 74 callbacks suppressed [ 2433.888919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 00:06:50 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2433.940034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 [ 2433.960365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 00:06:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @remote, 'sit0\x00'}}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x240e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext, 0x90200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(0xffffffffffffffff, 0x4, 0x3) lseek(0xffffffffffffffff, 0x1, 0x4) unshare(0x48020200) [ 2433.989046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 00:06:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x81, 0x5) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3b10, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}, 0x60c, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x151802, 0x12c) sendfile(r2, r0, 0x0, 0x4000007ffffffc) [ 2433.997609] FAULT_INJECTION: forcing a failure. [ 2433.997609] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.001271] CPU: 0 PID: 12735 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2434.002872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2434.004793] Call Trace: [ 2434.005409] dump_stack+0x107/0x167 [ 2434.006248] should_fail.cold+0x5/0xa [ 2434.007123] ? create_object.isra.0+0x3a/0xa20 [ 2434.008172] should_failslab+0x5/0x20 [ 2434.009054] kmem_cache_alloc+0x5b/0x310 [ 2434.009992] create_object.isra.0+0x3a/0xa20 [ 2434.010993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2434.012164] kmem_cache_alloc_bulk+0x168/0x320 [ 2434.013227] io_submit_sqes+0x6fe6/0x8610 [ 2434.014212] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2434.015351] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2434.016468] ? find_held_lock+0x2c/0x110 [ 2434.017405] ? io_submit_sqes+0x8610/0x8610 [ 2434.018405] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2434.019517] ? wait_for_completion_io+0x270/0x270 [ 2434.020633] ? rcu_read_lock_any_held+0x75/0xa0 [ 2434.021696] ? vfs_write+0x354/0xb10 [ 2434.022550] ? fput_many+0x2f/0x1a0 [ 2434.023386] ? ksys_write+0x1a9/0x260 [ 2434.024257] ? __ia32_sys_read+0xb0/0xb0 [ 2434.025202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2434.026400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2434.027584] do_syscall_64+0x33/0x40 [ 2434.028443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2434.029618] RIP: 0033:0x7fa8c8de3b19 [ 2434.030468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2434.034695] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2434.036451] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2434.038086] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2434.039720] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2434.041367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2434.043005] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:06:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfcfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2434.128289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12748 comm=syz-executor.6 00:06:50 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2434.194354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 [ 2434.231758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 00:06:50 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2434.273075] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 [ 2434.290773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 [ 2434.374101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12724 comm=syz-executor.5 00:07:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:09 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000000000006008e0e43d50000000000000011000080487fec864b005084e6cee08601fb5641cd049e9b5fe6f41b87fedca33c51b53e3de2ace9342889363ad413d48d26c0b14e0b71148fb634717b0142a42da04d3066425302b1b30b7071fb8c92584f130c39161046d97a4d0658d65fcbf8e8c8b4d99b26e249f97efb19af608b9300000800bf030000000000b21c09e0000000db083dd6b14cadab60ed8908f87b101a26f02011972575f78ba98c9a8bb33056739ad8055b5b237e5ddfcc7d5d865d6c46392db87970125c7754b68fff94839b13a78a36878b181a47ad25c1c9ac3a3b375b9ce9b44b1c14b0d6125fa208aca5357d6f17c915950c357d9d764e309b9ff3ab191bfc3d86fdbdb1d67dfb848976d770b016a152582c004d1ea5790dc55c18f0959ae6c7e1bd7f647a70bcdaca80c2e9a421330ea4ca7eabb30699967bb781fc297b25b85c3a019f864ef3e011e34fde5ef0f1fd93ada842db88fc6bc94f57867620e952a3e25f859848b6581d27bbd1fc9d436862810780a33a2d36ba548468618e93159294c7d4cf7de94fbcf012144f4893b0fb99e92ed1a6f241a28e0013eeb52ca64fb20a83d84d7fc34dcc787aef61b72fa299b1dd"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @remote, 'sit0\x00'}}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x240e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext, 0x90200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(0xffffffffffffffff, 0x4, 0x3) lseek(0xffffffffffffffff, 0x1, 0x4) unshare(0x48020200) 00:07:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80000001, 0x0, 0xfffffffd, 0x4, 0x6}) write$binfmt_elf64(r0, 0x0, 0x0) 00:07:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x42, 0x0, "d0432df83c9d480dc24c29b5786a30fdafb54144238c21b04de4115bad0b393478d4b6b51638dec4e9e97dfda50bc3fd19d1187395c5249e68b6b536d3118d83392f2d924e1501086fa7b7f3ffcf1e8e"}, 0xd8) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) 00:07:09 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:09 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:07:09 executing program 2: r0 = creat(&(0x7f0000000500)='./file2\x00', 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) utimensat(r3, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)={{0x77359400}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) r4 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r8 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000200)) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0xab4fd81576318ea5, 0x0, r7, 0x0, &(0x7f0000000180)="3fb0f15b36fab8d1e60aec828bb4926c2c9a1f059c39bebaa0d22a5c4b4ff14a7f446c7bf4a7cc56784a75a2c6607b20af504a8c913b06a763ffac524fc140806423a52854e7f424a2326057ad", 0x4d, 0x10}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) r9 = dup2(r4, r7) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="01180000000000a8d98437ebdad5990ce4fc7b96615d261478c613e1a5b2f3c72e247c5c072e43ea156bb1de4cb5dc391e4d652da914502e4798d1619617dae3d981e1d6da032e0cb209e2800d02506b214a410c6bd1e3e0c614da8587f6a4d2bba6d56951dc7c15b509951bf5d31382931367c5e08a6f50e7a6bb03b01fc91234c8f8759c7315b3603f0d6541db288d1cc1228414a8b6c193bbce1209869aa5f5c8120ff62ccbc2a040bf00b2347b9a68450e2c22c42aff42fb549511c2206a29e1959bfe7840ac10836a83562c", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x53f, 0x10000000, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x1, 0x0, 0x48, 0x0, 0x7ff, 0x4021, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x8, 0x7ff, 0x1ff, 0x4, 0x7, 0xfffffffb, 0x9, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa, r0, 0xa) fallocate(r0, 0x3, 0x4077, 0x8000) [ 2452.518917] selinux_netlink_send: 35 callbacks suppressed [ 2452.518936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12779 comm=syz-executor.6 [ 2452.547200] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:07:09 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2074, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000280), 0x7, 0x644082) execveat(r5, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)=':.[!\x00', &(0x7f00000003c0)=':\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='}&)\x00'], 0x1000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000240)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0]}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) write$binfmt_script(r7, &(0x7f00000006c0)={'#! ', './file0', [{0x20, ',\''}, {0x20, '\x14\x12#GW\x8d\x04jZ;(?F\x8b\x05\xaa\x12t>\x89[\xcc]`\xed\xc8\xe1U\x94\x06\xe2\x9f\xc4\x7f\xe9\v\x94\tI\"\xe8\x14\xd9RR\xae\xb3\xf3 \x97yN/\xcb\xb7q\xfe\xf3j\xf2\x0fr\x83\xb8\xc6\xb0\xe5\x97_\xfb\r\xae\xc2\x81\x86Ne\xc0Yi^\x03\x8a\xd6\x9c0'}, {0x20, '%O'}], 0xa, "d6a0a988c1f5561778b6c07c380dededddb3eb3a99643ff4bb2bd1661a8b31d622b7d3f2015060510d16ff5f31d44c48491b2b78793c40732d726fdb172ab4c62a8792ef754e424c7efd9b3f163e1a487449f05d55382e3f85a608c552a708b37b0842fc6d03a57b2a70e9a66ba0abac7fa0b55b8a7779b1fdeac2360111e3232f82502bbf96a1d6911be63d6a361c5f1b1455953cbb2709d77da2fb8a00dee03ad4e668bb0716167421decfcb68b6fb61248641495aef389847a00a1e8209ce"}, 0x128) r8 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000200)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r8, 0x80000000, 0x0, 0xa52d, 0x0, 0x1, {0x0, r9}}, 0xaa1d) 00:07:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfdffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:09 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0xa7ffffff00000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2452.733902] FAULT_INJECTION: forcing a failure. [ 2452.733902] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.736232] CPU: 1 PID: 12802 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2452.737376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.738738] Call Trace: [ 2452.739182] dump_stack+0x107/0x167 [ 2452.739787] should_fail.cold+0x5/0xa [ 2452.740421] ? create_object.isra.0+0x3a/0xa20 [ 2452.741203] should_failslab+0x5/0x20 [ 2452.741834] kmem_cache_alloc+0x5b/0x310 [ 2452.742510] create_object.isra.0+0x3a/0xa20 [ 2452.743230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2452.744070] kmem_cache_alloc+0x159/0x310 [ 2452.744764] xas_alloc+0x336/0x440 [ 2452.745367] xas_create+0x34a/0x10d0 [ 2452.745997] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 00:07:09 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xa7ffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2452.746866] xas_store+0x8c/0x1c40 [ 2452.747644] __xa_store+0x164/0x2d0 [ 2452.748417] ? xa_delete_node+0x280/0x280 [ 2452.749286] ? trace_hardirqs_on+0x5b/0x180 [ 2452.750163] xa_store+0x31/0x50 [ 2452.750823] __io_uring_add_tctx_node+0x1cf/0x520 [ 2452.751797] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2452.752840] __do_sys_io_uring_enter+0x146f/0x1890 [ 2452.754247] ? find_held_lock+0x2c/0x110 [ 2452.755332] ? io_submit_sqes+0x8610/0x8610 [ 2452.756494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2452.757768] ? wait_for_completion_io+0x270/0x270 [ 2452.758852] ? rcu_read_lock_any_held+0x75/0xa0 [ 2452.759891] ? vfs_write+0x354/0xb10 [ 2452.760731] ? fput_many+0x2f/0x1a0 [ 2452.761557] ? ksys_write+0x1a9/0x260 [ 2452.762405] ? __ia32_sys_read+0xb0/0xb0 [ 2452.763325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2452.764511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2452.765687] do_syscall_64+0x33/0x40 [ 2452.766521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.767671] RIP: 0033:0x7fa8c8de3b19 [ 2452.768506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.772635] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2452.774353] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2452.775947] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2452.777559] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.779148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.780735] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:07:09 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x2, 0x0, 0x0, 0x4080, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x40062, 0x8000, 0x800, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{}, @in6=@loopback, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}}, {{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x2}}}, [@mark={0x36}]}, 0x134}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x6}}, './file0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x200, 0x400000}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRESOCT=r6]) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) 00:07:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:09 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:09 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:07:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x300) r1 = socket$inet(0x2, 0x3, 0x6) pidfd_send_signal(0xffffffffffffffff, 0x40, &(0x7f0000000000)={0x3d, 0xb29}, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000000c0)) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x0) 00:07:09 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffa7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2453.270133] FAULT_INJECTION: forcing a failure. [ 2453.270133] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.273319] CPU: 0 PID: 12825 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2453.274885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2453.276741] Call Trace: [ 2453.277356] dump_stack+0x107/0x167 [ 2453.278178] should_fail.cold+0x5/0xa [ 2453.279046] ? create_object.isra.0+0x3a/0xa20 [ 2453.280076] should_failslab+0x5/0x20 [ 2453.280945] kmem_cache_alloc+0x5b/0x310 [ 2453.281874] ? mark_held_locks+0x9e/0xe0 [ 2453.282791] create_object.isra.0+0x3a/0xa20 [ 2453.283787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2453.284939] kmem_cache_alloc_bulk+0x168/0x320 [ 2453.285979] io_submit_sqes+0x6fe6/0x8610 [ 2453.286949] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2453.288074] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2453.289174] ? find_held_lock+0x2c/0x110 [ 2453.290095] ? io_submit_sqes+0x8610/0x8610 [ 2453.291086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2453.292182] ? wait_for_completion_io+0x270/0x270 [ 2453.293275] ? rcu_read_lock_any_held+0x75/0xa0 [ 2453.294314] ? vfs_write+0x354/0xb10 [ 2453.295152] ? fput_many+0x2f/0x1a0 [ 2453.295972] ? ksys_write+0x1a9/0x260 [ 2453.296834] ? __ia32_sys_read+0xb0/0xb0 [ 2453.297765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2453.298937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.300096] do_syscall_64+0x33/0x40 [ 2453.300931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2453.302089] RIP: 0033:0x7fa8c8de3b19 [ 2453.302927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.307050] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2453.308759] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2453.310361] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2453.311965] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.313573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.315172] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:07:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xff0f0000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:26 executing program 5: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2074, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000280), 0x7, 0x644082) execveat(r5, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)=':.[!\x00', &(0x7f00000003c0)=':\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='}&)\x00'], 0x1000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000240)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0]}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) write$binfmt_script(r7, &(0x7f00000006c0)={'#! ', './file0', [{0x20, ',\''}, {0x20, '\x14\x12#GW\x8d\x04jZ;(?F\x8b\x05\xaa\x12t>\x89[\xcc]`\xed\xc8\xe1U\x94\x06\xe2\x9f\xc4\x7f\xe9\v\x94\tI\"\xe8\x14\xd9RR\xae\xb3\xf3 \x97yN/\xcb\xb7q\xfe\xf3j\xf2\x0fr\x83\xb8\xc6\xb0\xe5\x97_\xfb\r\xae\xc2\x81\x86Ne\xc0Yi^\x03\x8a\xd6\x9c0'}, {0x20, '%O'}], 0xa, "d6a0a988c1f5561778b6c07c380dededddb3eb3a99643ff4bb2bd1661a8b31d622b7d3f2015060510d16ff5f31d44c48491b2b78793c40732d726fdb172ab4c62a8792ef754e424c7efd9b3f163e1a487449f05d55382e3f85a608c552a708b37b0842fc6d03a57b2a70e9a66ba0abac7fa0b55b8a7779b1fdeac2360111e3232f82502bbf96a1d6911be63d6a361c5f1b1455953cbb2709d77da2fb8a00dee03ad4e668bb0716167421decfcb68b6fb61248641495aef389847a00a1e8209ce"}, 0x128) r8 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000200)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r8, 0x80000000, 0x0, 0xa52d, 0x0, 0x1, {0x0, r9}}, 0xaa1d) 00:07:26 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:07:26 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:26 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000380)="03c69b9801bfd06ba16743c09faf122a8ea81e941130b78955143633466d775066c4a77cffc2a7bef540fe85e2d75c50750058bb4889aaee1d7f816424154bbe0c4f2366a888ea3a892174a7d34ff79e126a91b6de62ad8e296195259d3e87b42c2be77a41aa0bec06c8eaf87fe1845ab20bf633fe13de56ca3363674c4f86ac572b23fa488949d13192e90848077aff20faa5bc5d62845ef4627faa8319b4ae2800f5a1d725a1ec1f5c8561e3304ca42311411ec8f59637fd2f3068bbfdffba901be84c5950a2fec838ae44636864570863be48d6ce4e92b913f26661fdd4baf12d6851a559ed953efea0c62f", 0xed, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1}, &(0x7f0000000340)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') read(r1, &(0x7f00000002c0)=""/122, 0xda) timer_gettime(r0, &(0x7f00000000c0)) r2 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r2, &(0x7f0000000000)='children\x00') 00:07:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x13900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001500), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810000000806000186dd0600000000000000aa00fe800000000000f0dd000000000000bb0180c200e6ff1f010000000000000000010000000000"], 0x0) fsync(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x800, 0x6, 0x101, 0x5, 0x5, 0x5}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800) open_by_handle_at(r1, &(0x7f0000000140)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x3, 0x9, 0x4, 0xffffff2b, 0x4}}, 0x30300) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@euid_eq}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '\x1a($&3'}}, {@obj_role={'obj_role', 0x3d, 'dfUtuid'}}, {@permit_directio}]}}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) dup2(0xffffffffffffffff, r2) 00:07:26 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) [ 2469.997422] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2470.014949] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2470.026075] 9pnet: Insufficient options for proto=fd 00:07:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:26 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2470.194265] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:07:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5bc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ffbe3ebcd2193c000143581d7f5e9883a8d0dd3b0af0e7cae7c0fed0f40b0118650117c2230000000000030000ffffff17504bdc00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xa, 0x0, "0792ade4eff3d51ae1c35206d8098758db6a56ba977a856d7c576d40c2e65ca2d5773618a27635f95bd9c12b6bdda484bb130ef53e11060c0c7d9a04e184707c41a839dbdac13e41c451f4d88987a291"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800f200", @ANYRES32, @ANYBLOB="e0ffffff080000002e2f66696c653000"]) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x72, 0x1f, 0x1, 0x0, 0x0, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x8000}, 0x40f19, 0x40, 0x0, 0x8, 0x5, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x10, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251"]}]}, 0x24}}, 0x0) [ 2470.259002] FAULT_INJECTION: forcing a failure. [ 2470.259002] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.263697] CPU: 0 PID: 12854 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2470.265257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.267135] Call Trace: [ 2470.267731] dump_stack+0x107/0x167 [ 2470.268548] should_fail.cold+0x5/0xa [ 2470.269402] ? create_object.isra.0+0x3a/0xa20 [ 2470.270432] ? create_object.isra.0+0x3a/0xa20 [ 2470.271458] should_failslab+0x5/0x20 [ 2470.272315] kmem_cache_alloc+0x5b/0x310 [ 2470.273233] create_object.isra.0+0x3a/0xa20 [ 2470.274226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.275376] kmem_cache_alloc_bulk+0x168/0x320 [ 2470.276412] io_submit_sqes+0x6fe6/0x8610 [ 2470.277364] ? percpu_ref_tryget_many+0x5d/0x2d0 [ 2470.278448] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2470.279569] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2470.280660] ? find_held_lock+0x2c/0x110 [ 2470.281582] ? io_submit_sqes+0x8610/0x8610 [ 2470.282600] ? lock_release+0x4d1/0x680 [ 2470.283495] ? nmi_handle+0x23e/0x360 [ 2470.284353] ? lock_downgrade+0x6d0/0x6d0 [ 2470.285301] ? nmi_cpu_backtrace+0x5d/0x100 [ 2470.286297] ? nmi_handle+0x25d/0x360 [ 2470.287170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2470.288352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2470.289517] do_syscall_64+0x33/0x40 [ 2470.290367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.291527] RIP: 0033:0x7fa8c8de3b19 [ 2470.292372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.296513] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2470.298241] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2470.299854] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2470.301469] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.303090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.304701] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:07:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x4c015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x22200, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ecryptfs\x00', 0x0, 0x0) 00:07:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffe000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:27 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:27 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:27 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4100, 0x1004}], 0x1, 0x2, 0xfffffff9) [ 2470.431247] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2470.452249] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:07:27 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="07000002aab3165a6e6a24ff1886e1f7a700"/28]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000040)='./file1\x00', 0xc8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="9789cdc1a58bb7b4ce6b9173a41ae2f452523a45992fbb476b7ba2f081093dc89803cc6745a634a85feaf8f2cd4ec14543c88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffbb966b332d87a3c99b80c16f31f280431ef91e603"]) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f00000001c0)='./file1\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xa000, 0xf6) acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:07:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffbff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2470.507878] Process accounting resumed [ 2470.558143] Process accounting resumed [ 2470.562167] Process accounting resumed [ 2470.629968] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2470.645382] Process accounting resumed [ 2470.672673] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:07:43 executing program 5: fdatasync(0xffffffffffffffff) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x4, 0x14, 0x0, 0x19, 0x8, 0x0, 0x5, 0x1a, 0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6000, 0xf9e) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x401}) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000000c0)=""/88) r1 = fsopen(&(0x7f0000000140)='jffs2\x00', 0x1f42d64378f81ddf) r2 = dup2(r0, r1) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0x1, 0x7) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000200), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)=""/246, 0xf6}], 0x2, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x10142) r9 = syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x100, 0x2, &(0x7f0000000700)=[{&(0x7f00000005c0)="2bb30294986001b3216cefc7140d4dbf4371f73116e894bc7885479b8c85766d39013cb373a6161a467de03eacce0e0a0db55b999e1c68d7b75fc3f872e98c0bf3807df10891f50533224c57444f2921e00083a7e2d4d954a66a4b9b2fdf2c9946d2dfbd0fbffb383fe95645809d2b9572efc4480acf856aa6b8b73bc1560dc0e435154da55baa6729eec45f9fe2ef811083a3e6b44d48819cf904b55c00c7339485153df820aed5e0e970d5a3e70b73d6e79146ec89463b693692aa88b391c94557bb165927e8e1", 0xc8, 0x9}, {&(0x7f00000006c0)="4ec964466c2adce81a8005ec87593f20de4b9de1de076cf095ae47e545e2eac20cd90a0a", 0x24, 0x8}], 0x200020, &(0x7f0000000740)={[{@nodots}, {@dots}], [{@smackfshat}, {@euid_lt={'euid<', r4}}, {@fsname={'fsname', 0x3d, '\x00'}}, {@hash}, {@uid_gt={'uid>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, ')\x7f'}}]}) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0xb9d8, 0x401}) fcntl$getownex(r3, 0x10, &(0x7f0000000800)) r10 = dup2(r8, r6) getsockopt$bt_sco_SCO_CONNINFO(r10, 0x11, 0x2, &(0x7f0000000840)=""/129, &(0x7f0000000900)=0x81) openat(r5, &(0x7f0000000940)='./file0\x00', 0x109002, 0x5) sendfile(0xffffffffffffffff, r7, &(0x7f0000000980)=0x80000000, 0x1) r11 = signalfd4(r7, &(0x7f00000009c0)={[0x7]}, 0x8, 0x80800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r11, 0x89fb, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x0, 0x7, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x20, 0x20, 0x4, 0x27a}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) 00:07:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r1]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000118000000", @ANYRES32=r2, @ANYBLOB="6d880000000000002e2f66696c653000"]) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) dup(r0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000280)={0x101, 0x3, 0xfffffffc, 0x80000, 0x8}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x8}) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x8, 0x7, 0x1, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x81, 0x2, 0x401, 0x3, 0xff, 0x4, 0x200, 0x0, 0x9, 0x0, 0x1bdb}, r4, 0x0, r7, 0x9) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:07:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x800, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = socket$inet(0x2, 0x1, 0xff) r5 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r5, r0, 0x0, 0x4000007ffffffc) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9, 0x40, 0x9, 0x40, 0x0, 0x6, 0x80122, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x14ae967d, 0x0, @perf_config_ext={0x8e84, 0x4}, 0x8410, 0x7, 0x5618ebed, 0x6, 0x3ff, 0x7, 0x20, 0x0, 0xfffffbff, 0x0, 0x2000000}, 0x0, 0xc, 0xffffffffffffffff, 0xb) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bind$packet(r8, &(0x7f0000000200)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @random="3823151b5652"}, 0x14) 00:07:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:43 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:43 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="07000002aab3165a6e6a24ff1886e1f7a700"/28]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000040)='./file1\x00', 0xc8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="9789cdc1a58bb7b4ce6b9173a41ae2f452523a45992fbb476b7ba2f081093dc89803cc6745a634a85feaf8f2cd4ec14543c88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffbb966b332d87a3c99b80c16f31f280431ef91e603"]) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f00000001c0)='./file1\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xa000, 0xf6) acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:07:43 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:07:43 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2486.495852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2486.526506] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2486.619945] FAULT_INJECTION: forcing a failure. [ 2486.619945] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.622840] CPU: 1 PID: 12938 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2486.624573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.626303] Call Trace: [ 2486.626879] dump_stack+0x107/0x167 [ 2486.627666] should_fail.cold+0x5/0xa [ 2486.628492] should_failslab+0x5/0x20 [ 2486.629313] kmem_cache_alloc_bulk+0x4b/0x320 [ 2486.630283] io_submit_sqes+0x6fe6/0x8610 [ 2486.631315] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2486.632522] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.633731] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.634957] ? find_held_lock+0x2c/0x110 [ 2486.635954] ? io_submit_sqes+0x8610/0x8610 [ 2486.636868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.637896] ? wait_for_completion_io+0x270/0x270 [ 2486.638951] ? rcu_read_lock_any_held+0x75/0xa0 [ 2486.639942] ? vfs_write+0x354/0xb10 [ 2486.640751] ? fput_many+0x2f/0x1a0 [ 2486.641534] ? ksys_write+0x1a9/0x260 [ 2486.642368] ? __ia32_sys_read+0xb0/0xb0 [ 2486.643270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2486.644416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2486.645532] do_syscall_64+0x33/0x40 [ 2486.646340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2486.647425] RIP: 0033:0x7fa8c8de3b19 00:07:43 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xa7ffffff00000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2486.648251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.652427] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2486.654058] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2486.655621] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2486.657141] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.658688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.660226] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 [ 2486.666171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2486.667778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2486.683196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2486.689387] Process accounting resumed [ 2486.732856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2486.782940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2486.783914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2486.784907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2486.821200] Process accounting resumed 00:07:43 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa7ffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:07:43 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:07:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:07:43 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="07000002aab3165a6e6a24ff1886e1f7a700"/28]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000040)='./file1\x00', 0xc8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="9789cdc1a58bb7b4ce6b9173a41ae2f452523a45992fbb476b7ba2f081093dc89803cc6745a634a85feaf8f2cd4ec14543c88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffbb966b332d87a3c99b80c16f31f280431ef91e603"]) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f00000001c0)='./file1\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xa000, 0xf6) acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:07:43 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) openat(r3, &(0x7f0000000280)='./file1\x00', 0x2000c2, 0x18) r4 = openat(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/4096, 0x1000}, 0x40) dup2(r5, r4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:07:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040), 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800010900000000000000000a00000008000000", @ANYRES32=0x0, @ANYBLOB="0c0009800800ff00", @ANYRES32=r1, @ANYBLOB="29ab3e683dcc62696bd9d8557c80e4b3d8fc695e8207c503c4607f83a6bfa4f61a4f6df735cc621fe8926cbdbb811190b1e0fd92dc93b63d5edeaaebcaf7417ceb331852d9aec2bca8e6f7da7d761ba17d6a0912da01b6a70ccc62ba867a5931d029b515dff29b0ab492eb17ac2d6d5c8210fb259d87a05661eecd67b1d38e958b"], 0x28}}, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x100) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r4, 0x40b, 0x70bd28, 0x25dfdc00, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040) read(r0, &(0x7f0000000200)=""/4096, 0x1000) [ 2486.887335] FAULT_INJECTION: forcing a failure. [ 2486.887335] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.889020] CPU: 0 PID: 12961 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2486.889862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.890874] Call Trace: [ 2486.891206] dump_stack+0x107/0x167 [ 2486.891668] should_fail.cold+0x5/0xa [ 2486.892138] should_failslab+0x5/0x20 [ 2486.892603] kmem_cache_alloc_bulk+0x4b/0x320 [ 2486.893156] io_submit_sqes+0x6fe6/0x8610 [ 2486.893681] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.894301] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2486.894912] ? find_held_lock+0x2c/0x110 [ 2486.895404] ? io_submit_sqes+0x8610/0x8610 [ 2486.895939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.896533] ? wait_for_completion_io+0x270/0x270 [ 2486.897127] ? rcu_read_lock_any_held+0x75/0xa0 [ 2486.897722] ? vfs_write+0x354/0xb10 [ 2486.898174] ? fput_many+0x2f/0x1a0 [ 2486.898628] ? ksys_write+0x1a9/0x260 [ 2486.899114] ? __ia32_sys_read+0xb0/0xb0 [ 2486.899610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2486.900283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2486.900619] FAT-fs (loop5): Directory bread(block 10) failed [ 2486.900915] do_syscall_64+0x33/0x40 [ 2486.902639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2486.903272] RIP: 0033:0x7fa8c8de3b19 [ 2486.903740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.905020] FAT-fs (loop5): Directory bread(block 11) failed [ 2486.906002] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2486.906017] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2486.906023] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2486.906030] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.906037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.906044] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 [ 2486.938464] FAT-fs (loop5): Directory bread(block 10) failed [ 2486.939729] FAT-fs (loop5): Directory bread(block 11) failed [ 2486.940819] FAT-fs (loop5): Directory bread(block 10) failed [ 2486.941610] FAT-fs (loop5): Directory bread(block 11) failed [ 2486.963399] Process accounting resumed [ 2487.022300] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2487.027258] Process accounting resumed [ 2487.068722] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000240)) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r5 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) r9 = dup2(r5, r8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0x8b2, 0xffffffffffffff00, 0xe6}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x6d, 0x2, 0x1, 0x0, 0x3, 0x99000, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x10000000000007a, 0x3ff000000000000}, 0x854, 0xff, 0x7b6a, 0x7, 0x7, 0x0, 0x8, 0x0, 0x1, 0x0, 0x4}, r4, 0x4, r9, 0x2) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x30, r0, 0x8000000) 00:08:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:00 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffa7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:00 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="0100e221bcca00000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976945ffe872c042e6395824e3ee4907d440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc00"/95, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x134}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1e, 0xc21, 0x0, 0x0, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x10000}]}, 0x1c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)={0x406200, 0x1fe, 0x10040005}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0x8, 0x2, 0xffffffffffffff7f, 0x2, 0x101, 0x9}) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 00:08:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3a0000010051a3c3f33aa9cdb9453d070d053442abe6fe93eff223d4a0de9d798587df4cd7f840fb84f9395c1c05ed43bd8e589f2be568247c2783d3e4cfb3b695714e9274a08dfffa63a06d25982bc4f3da381a", @ANYRES16=0x0, @ANYBLOB="04042dbd7000fcdbdf25590000000c009900070000002d000000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x850) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x9}, {0x1, 0x0, 0xf9, 0x7a}]}, 0x10) r1 = dup(r0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x4, 0x10, 0x0, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @mcast2, @rand_addr=' \x01\x00']}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x87, 0x20, '\x00', [@ra={0x5, 0x2, 0x3f}, @calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x6, [0x0, 0x4, 0x548, 0x6]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x80, [0x1ff, 0x1000, 0x2]}}, @generic={0x1, 0x38, "e0f874b3d63596ffdf1bcc560e92781ec3f6636b54e53b618633d1351b0b9f97e1d2f397cf9f36be34b0b872d1647243083bbd205a763a14"}, @hao={0xc9, 0x10, @local}, @pad1, @generic={0x96, 0xd, "635aad432221650d8ef058e26d"}, @generic={0x1, 0x4c, "e06280a5ee8e548a0c8920b8226cb5c50906735dcbc969510ce0f9ba629482c9bdab5d43964c0a9dc7810ce6eeaba814226da456bbe34bd7b45270f93ea4f124a0591d7f7a253babcf56a861"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}}]}}}], 0x218}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:08:00 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:00 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) setpgid(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="f7ff000000000000ded7a5d8bcfbc9ae4d6e2f11b42e15c30a718b8761add661a80e7799064e99d7ce667ed3b1b2954d78fc13024cad111caf5798778c90313df833c562fbb8495a6e0ccb1770"]) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000c00)={0x0, 0x0, "b073566ffec33225ccd37c5fb8a6950504700d4633758e1bd43e3ade76a2f2224bc708c39cc82967f7d45323f5a46b33dd067504cc5da9663927b3c1ac3b36e09c40cc19b998c92739fafe57c2ef4566d5b53f31e3708f436387cea32c7ec83995bdb9521f8a8c26b3faa0dd886d3adb6c2694ddf889bf71fbd988422595212255dfbaf656002b8903787a795a16a4a7b043df8b3f9c2e2f7e5169f6305d92143d2c61a2e838538c3115b55e3068c9b231f2b20ebbcb98eeb8e97d119ac2b6b3a092846b14c44047cf6a31a08be30184125e959ab65fdad33cc6c32f29e62c690aaf6340ae83a2f99df2a151810fa9d791ab1cef403c5a37a812d2ec72585796", "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"}) r7 = syz_open_dev$vcsn(&(0x7f0000000180), 0x10000, 0x620001) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000580)={'ip6gretap0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000004c940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000005a7c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005b7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b9c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r15}, {0x0, r16}], 0x5, "75ae5cb28a6663"}) kcmp(0x0, 0x0, 0x0, r1, r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r17 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r17, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2504.130898] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2504.154353] FAULT_INJECTION: forcing a failure. [ 2504.154353] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.158531] CPU: 0 PID: 13007 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2504.160093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.161950] Call Trace: [ 2504.162549] dump_stack+0x107/0x167 [ 2504.163382] should_fail.cold+0x5/0xa [ 2504.164245] ? create_object.isra.0+0x3a/0xa20 [ 2504.165269] should_failslab+0x5/0x20 [ 2504.166128] kmem_cache_alloc+0x5b/0x310 [ 2504.167047] ? mark_held_locks+0x9e/0xe0 [ 2504.167953] create_object.isra.0+0x3a/0xa20 [ 2504.168931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2504.170072] kmem_cache_alloc_bulk+0x168/0x320 [ 2504.171116] io_submit_sqes+0x6fe6/0x8610 [ 2504.172050] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2504.173188] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2504.174294] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2504.175405] ? find_held_lock+0x2c/0x110 [ 2504.175937] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 8 (only 16 groups) [ 2504.176330] ? io_submit_sqes+0x8610/0x8610 [ 2504.179720] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2504.180812] ? wait_for_completion_io+0x270/0x270 [ 2504.181905] ? rcu_read_lock_any_held+0x75/0xa0 [ 2504.182953] ? vfs_write+0x354/0xb10 [ 2504.183792] ? fput_many+0x2f/0x1a0 [ 2504.184616] ? ksys_write+0x1a9/0x260 [ 2504.185463] ? __ia32_sys_read+0xb0/0xb0 [ 2504.186377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.187565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.188726] do_syscall_64+0x33/0x40 [ 2504.189552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.190701] RIP: 0033:0x7fa8c8de3b19 [ 2504.191540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.195975] RSP: 002b:00007fa8c6338188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2504.197651] RAX: ffffffffffffffda RBX: 00007fa8c8ef7020 RCX: 00007fa8c8de3b19 [ 2504.199228] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2504.200797] RBP: 00007fa8c63381d0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.202370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2504.203972] R13: 00007ffce77c429f R14: 00007fa8c6338300 R15: 0000000000022000 00:08:00 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2504.343759] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:01 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="48010000100001000000000000000000ac1e00010000000000000000000000fe8000000000000000000000aa000000000000000000000000000000005370ff526fa702ccffa4e48fde954f4678b606e810a92b94a4475191272e21c10b5ce3abce04dae4d8b7633613277c11d1626fdbc7b348095a82d4b80bd6aea63fb139e8776df128d2bdfb51b0999f", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x148}}, 0x4c804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup2(r2, r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet(0x2, 0xa, 0x0) dup3(0xffffffffffffffff, r1, 0x0) fork() ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x6887) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r5 = fork() ptrace(0x10, r5) ptrace$cont(0x1f, r5, 0x68c, 0x0) 00:08:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2504.421332] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 8 (only 16 groups) 00:08:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x74}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x8000}, 0x1009) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) add_key(0x0, 0x0, 0x0, 0x0, r3) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20040010) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r4) unshare(0x48020200) [ 2504.609408] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2504.613115] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:01 executing program 6: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000100), 0x0, 0x0) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000fec000/0xf000)=nil, 0xf000) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2000002, r0) mremap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 00:08:01 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:01 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2504.717266] FAULT_INJECTION: forcing a failure. [ 2504.717266] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.718104] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2504.720174] CPU: 1 PID: 13037 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2504.722874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.724603] Call Trace: [ 2504.725160] dump_stack+0x107/0x167 [ 2504.725925] should_fail.cold+0x5/0xa [ 2504.726726] ? create_object.isra.0+0x3a/0xa20 [ 2504.727703] should_failslab+0x5/0x20 [ 2504.728501] kmem_cache_alloc+0x5b/0x310 [ 2504.729354] ? mark_held_locks+0x9e/0xe0 [ 2504.730210] create_object.isra.0+0x3a/0xa20 [ 2504.731134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2504.732205] kmem_cache_alloc_bulk+0x168/0x320 [ 2504.733164] io_submit_sqes+0x6fe6/0x8610 [ 2504.734071] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2504.735124] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2504.736140] ? find_held_lock+0x2c/0x110 [ 2504.737000] ? io_submit_sqes+0x8610/0x8610 [ 2504.737920] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2504.738945] ? wait_for_completion_io+0x270/0x270 [ 2504.739961] ? rcu_read_lock_any_held+0x75/0xa0 [ 2504.740924] ? vfs_write+0x354/0xb10 [ 2504.741699] ? fput_many+0x2f/0x1a0 [ 2504.742456] ? ksys_write+0x1a9/0x260 [ 2504.743259] ? __ia32_sys_read+0xb0/0xb0 [ 2504.744108] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2504.745195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2504.746270] do_syscall_64+0x33/0x40 [ 2504.747050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2504.748109] RIP: 0033:0x7fa8c8de3b19 [ 2504.748882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.752701] RSP: 002b:00007fa8c6359188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2504.754279] RAX: ffffffffffffffda RBX: 00007fa8c8ef6f60 RCX: 00007fa8c8de3b19 [ 2504.755774] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2504.757249] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.758725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2504.760211] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:08:01 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:01 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:01 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20d315) r4 = epoll_create(0x7) dup2(r4, r2) 00:08:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13900, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x400, 0x0, 0x100, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x1}, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) fsync(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="090000000800000000000000000072629748000017edc200000000"]) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280), 0x4200414, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d80b0010bd032e5679a712c2aac7494c8d68ed6f9bedcdfe85066ae4cfb282541f6ae23ef6b4d38ea7fb6ad3f4e0def9ce534e1ed7db674c0e7707e7bb9225ccdf91bc1340aad4117ff258fe90f368a34b6b08ca33f839d5b60a76716336f55f164fd8e58c685dec7b9ed2d588accb1d4a86b606568545873a14838a1b693d1ee6bc14a20d6a1c625288ccc447c0636245ec8e890a78e7ed95f42281beba0517e", @ANYRESHEX=r0, @ANYBLOB=',access=any,version=9p2000,msize=0x0000000000000040,debug=0x000000005e1f8218,privport,uname=(6[:[!)\\#^:(,subj_role=/}*+}-**p)}^@^@&,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c6673636f6e746578743d726f6f742c6f626a5f726f6c653d2f7072f9632f7474790864726976657273002c736d61636b66737472616e736d7574653d2c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) pread64(r2, &(0x7f0000000080)=""/55, 0x37, 0xfc9) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="a85b37430df6b309f7795c2800"]) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) dup2(0xffffffffffffffff, r3) 00:08:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1c0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x42a100, 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000200)="ede0dded205794c576a7161d0ecaceb3418c878fcbc3b790a688fb8a8049e3ab355e96fbf1e4103e492eee3591f60eba9366ff1c43d9200611c13e429dd3017a71d700862469f9747ba56b012ba041510a559d5035111b13167bacb9cc2f1baf794135e786c68dff4572966b7dbcadc74d0a162652933aee3c2a207871ca4b2b5b9bf8a72c6e96a8c99fbff546c396ca0ad2abd477466b701b80b863a78d0b74426efa6b8160a3a6d84f5e940757cca816afb201d2", 0xb5}, {&(0x7f00000002c0)="6ff66a6a92206a", 0x7}, {&(0x7f0000000300)="20f960b88c9ad4243f3392e8b4802f8477e090c09d221eddcff47f137d5bf8a7b0cc9817ab36f24e670e111b8e69496b2b08d80cdbfdf44727e2164b4bab44ce9e1bb28229eed1b3856124060401bbdb2b8c18045d13de9f39503341353427895a8bc719399fb1903275394f91960c1f5880449fd1562a1483b7bffffb740fe87abf19ed1e75e6aa152971130462f8d22643569961f47b618e6b90fa8e735544a83804e6476ab1d1d4a0359497f2d0687b632edc5cc7b22cc6", 0xb9}, {&(0x7f00000003c0)="8e61ec2c848650985622547d9049f226015ca5bc2d5ac93f397bc27757b5b27559604c5bd42e8bb296692d4a1cf8a1d9395dd62ce90343bff68703860d8ad906a5d2d7144ef4ea7fc128a1ba1a83c2a6cf88eec2c76893c0dbac7cc59d8f2e471e514fd16f31e3a49c54b5ba7d7edae43ca14450d9f3102646db7db998ed553dc8f1d7bf8027ce1215b6dcb783fe098c18410d23e30d2b003e949422a8de1f7a40944b9e30775ea35b6002bdb631dfe16f7f5631d4d52b9b12f13b3762b4cd0fc7111cc44f1b73f4f03c8f525d898ff04f82ff455b33be3fef6e0bbbeb2ea7f7c8f243d5bf469beb5fd89c927f9d", 0xee}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="f06b6a90c94e6db5b74cefca86cd9e646309bcdcfc9a8fe75e320cf6493181a545772b1277bf22b8be79a1696d8f", 0x2e}, {&(0x7f0000001500)="7b5471afe38ca9057e8a79f15fd2df479474b59126f19ee8c979d366919df2f8bf54fcf3c91e6daad47f628056adc7227278f87969253659825521f9e1531ea17ab625e53d5a3a3bb5ba5e1d1bc602d26b13fbea4bd59360626665af912a9774b513de5133d2aa369d62d5e897f363f3b4660a1cc7241d702f4dc6299536b00e15f2e3904927cac1959e7e122fcce7816ec53eab49c663e161aa527aeb84b10b", 0xa0}, {&(0x7f00000015c0)="ca82bf4fc90d4a569f9fd070ae7b97d8785ab2687854e0970a8c8f1ec7b9a19047460bc291e96164b84263347ccafbc3437a19bdc9dfe232e71287f885821de0fb1023acbe26b1cec3e6dec089e7bef586663c9e49446f765b199543a5195b6e400c25b159c0478afaa71e30c4aec0022a24bafb6254de4d247ceb60852a7641ee", 0x81}, {&(0x7f0000001680)="095bb21e5359b0eccd36899eec7aa30f4ee3da2abde5118d140f5f945b84529e46307cb848f4c5908602ad625e0c78863d3b882f7459a8fdfdf96c8cb811d86f35c5c85d77787863e283f2e69b41c50785b214db2658fc50fa361c14", 0x5c}], 0x9) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB="080400000000f1002e2f6669f25cfa512212cae51aadb7f6bc2e964982510283b23a4ffdbc2f9b3f3e31ac5261ea7bf6d850f558be56399049e2544c3d95e45daebe2b45fe4e052e01000000ad24b3994b231957147515fbc6ae1ee66d0d489960221fe2f0784ffb"]) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000200)) fallocate(r4, 0x30, 0x33b8, 0x0) sendfile(r3, r0, 0x0, 0x4000007ffffffc) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000140)={0x1000, 0xfffffffd}) [ 2505.080180] 9pnet: Insufficient options for proto=fd [ 2505.096356] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2505.128318] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2505.239018] FAULT_INJECTION: forcing a failure. [ 2505.239018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2505.241210] CPU: 1 PID: 13065 Comm: syz-executor.4 Not tainted 5.10.233 #1 [ 2505.242446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.243810] Call Trace: [ 2505.244260] dump_stack+0x107/0x167 [ 2505.244870] should_fail.cold+0x5/0xa [ 2505.245485] _copy_to_user+0x2e/0x180 [ 2505.246099] simple_read_from_buffer+0xcc/0x160 [ 2505.246893] proc_fail_nth_read+0x198/0x230 [ 2505.247595] ? proc_sessionid_read+0x230/0x230 [ 2505.248367] ? security_file_permission+0xb1/0xe0 [ 2505.249133] ? proc_sessionid_read+0x230/0x230 [ 2505.249896] vfs_read+0x228/0x620 [ 2505.250467] ksys_read+0x12d/0x260 [ 2505.251081] ? vfs_write+0xb10/0xb10 [ 2505.251678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2505.252501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2505.253337] do_syscall_64+0x33/0x40 [ 2505.253932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2505.254749] RIP: 0033:0x7fa8c8d9669c [ 2505.255339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2505.258424] RSP: 002b:00007fa8c6359170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2505.259660] RAX: ffffffffffffffda RBX: 0000000000000517 RCX: 00007fa8c8d9669c [ 2505.260821] RDX: 000000000000000f RSI: 00007fa8c63591e0 RDI: 0000000000000008 [ 2505.261954] RBP: 00007fa8c63591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2505.263118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2505.264284] R13: 00007ffce77c429f R14: 00007fa8c6359300 R15: 0000000000022000 00:08:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x124800, &(0x7f0000000a00)) 00:08:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}, 0x44102, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:08:16 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff97, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:16 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c40000000000109022400010000000009040000124ed0462fd04907010300090501020000000000090582020000000000"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x137, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x2, 0x1, 0xa2, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '`'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4080000, 0x8068, 0x80, 0xfd}, {0x6, 0x24, 0x1a, 0x4}, [@mdlm_detail={0xa9, 0x24, 0x13, 0x20, "6aa812c7a10480807b42671624116823d076dff0107029e8317e089ea2e78edc374958fa289d4537d670b0f46beb3ffcd1bbd798713f55aea4851f152ee907aa74ea7b77a3f16009d1912de8e3ff3b88c9b8b6a8db257daf28f70d35806c8a1d42b31ade0de34308c84118827ad68eb88e31a3b74845f7442108b6c54fd27ae37b9e047ffd97481cfcbe0995b58893896bf4f70071ebd5245b6d01ce9c6b607af79e4f4dfa"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x7}, @dmm={0x7, 0x24, 0x14, 0xa0, 0x8ac3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0xfb, 0x1f, 0x3, 0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x55, 0xd2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3f, 0x0, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x2, 0x1}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x5, 0x7, 0x2, 0x8}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1f, 0x40, 0x0, 0x30}]}, 0x4, [{0x92, &(0x7f0000000200)=@string={0x92, 0x3, "b0766d3237b84d9df834668f5cd56b177d37ad87ade21280e155a145b91cf1756eebf37560d514af3518957dc6d0d3a449273253d185d0e53dc64d9d2b044a0368e579ae63b7b7923ec08df09cce559c39cd9adddd9c0ec220bc8e163141aa465706361371d5d64a4b59dcc2ae7f30ef64bdf46cf0aa897f64f5c47d54a43962bfe50ffe00fb399a64509875444d4590"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x74, &(0x7f0000000340)=@string={0x74, 0x3, "7d9194111d4f64aa5bc09a484b6bbb7e748f8dfe6714a9d9a9340c139ce95ff21f51e68f2ded90bf5805762e5c7ead36cf5cf5221fe4486e28739dbce5fc90287c08a168aba66faf62bdc9d64c88925c64d46100e23686930499e8bb7b700d60a0b967ed331d1662f59b89b78a1302d18b9b"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 00:08:16 executing program 6: r0 = socket$inet(0x2, 0x80000, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000002c000000", @ANYRES32=r0, @ANYBLOB="00651000000000000087716e2db1a81416f2f71104e4b200000000000000"]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x86b3, 0xbf, 0x96f, 0x0, 0x1, 0x4, 0x6, 0x1, 0x1f, 0x8, 0x6, 0xe89, 0x5, 0xffffffff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet(0x2, 0x6, 0x6) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:08:16 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:16 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2520.307175] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2520.363991] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:17 executing program 5: get_robust_list(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) 00:08:17 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x802c2, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000000300)=""/94, 0x5e}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="1c00000000e6ffff000000000200000039cada62ff92d201b6b55420a65eca7db18274259591bab17a02238c238fe66df86f85a2c9ed851745bf3aa5300555ea543c374c8da06b529cf5cf35820bb8a9dea3eafc58adc14cfacf7cb2b1f07ea4df70d04a6bbb164b16b1bd40fd9db34d20bb742e713f1fffff67970ba1abf5da1cdd26b3471d3edc875782e505bfb01f5b6a499dadf9d768b8c8f03ea6f045c2384538fcedfea3877aeef49965e4ca225f83cfa7dbb43c708d50e0e20697234e29dc495798e73dc6db86f9a6b8aae26e7f0e62358904acdf1f08a97673345c7c364c913df2dce12a659900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x100}, 0x2000) fallocate(r0, 0x10, 0x0, 0x5) write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x2, {0x8, 0x3, 0x4}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) openat(r1, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010400000000000000002800000005002b00020a000100777030283100000108000200000000b518ec90b194f4d23b89d09214ba972a836fa8d1c086de63fcc2c5aad3ea4df3b67bd4b1ab7f17bd7fde6d3e5543439866", @ANYRES32=0x0, @ANYBLOB="0600060003000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040840) unshare(0x48020200) 00:08:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:36 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x4e, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000012c0)="37c90c7a45ead7c0bb39312fbf682aac640d31b5e373fe615837a99cf546fda4582fa347d3c9a226aa702860eb3b9aedfc", 0x31}, {&(0x7f0000001300)="e8beebd0f6d1be9327c9aabc3f45867630b8f3644c17063f1304fffe2718927303b021de308103369566dff2784539d306bc21d5db01301423ddb93667ffba77e67ba8f6d89f8f12ae907a7940c2788c7a601b26c1d10387ee2f1a316b5728fbb2ea863ecc45e590de094e8f49b04d05c762a94ebafb3c508947f8347020b554590dff44ac0be09a525acca1ed549439ae0f059379ebe3a02e0a50de0dfe588c7d3d64c8df9329a920738c4485a1c1eaa0544489928c0093013a6fbb4a75f57f28adaf9b63c73ed55eeb89f4f1581d4c03c93ce864f83f41480507d92c47f862a695e72bfa0939dddd903bb5c97e52b767b907f57ed0c29f75576c4e", 0xfc}, {&(0x7f0000001400)="f3ca848b2756b92c8587c107f733952659c443316fa27e4cf2ac14a29202967aaaea6bf9c3db6ab2a270f7e2f3568ec84a0a8e94b10ea76528dfaba40ea918ade6505da1cecc7029ef65ea3bb90380abe658240c97bd4f6d3f", 0x59}, {&(0x7f0000001480)="7b052ef090bcc77fafff631f374fc925cc8470aafb208311f6461d9a8aeb1d6b3c0626", 0x23}, {&(0x7f00000014c0)="2ebca71cdbb46cd7355aa49b7c2335bf3b9710ab712f3006609562691f91e63acf78ffb0452a15cebb02e8b71fc590c51e7484332bb00fee254ea5acceff5dd6ae39e86a52740daa97936f828e3212e1ea05a518910460b1ac8c5b818e308aacc83a2a9ddf15cbf7f68a5f93598201ac418a94221d2213ef445453fab35ffb43dcd0425c89a07db3c13ac6e069c56455acce13464268dd707b7c6993", 0x9c}], 0x5}}, {{&(0x7f0000001600)={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001640)="9aa347018744abbe09efed", 0xb}, {&(0x7f0000001680)="5a6fdd50fd3d4d5f81aff2844b3ef4d1152affd8370d3c7c94a443f502697ce29409c0b162c08ca42149b02cccc605a2333b4fc84de417e4adab42624277495430f1ca0f", 0x44}], 0x2}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}, 0x1c, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x3, 0x20008010) r7 = open_tree(r0, &(0x7f0000001780)='./file0\x00', 0x0) clone3(&(0x7f0000001240)={0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x26}, &(0x7f00000001c0)=""/55, 0x37, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff], 0x1, {r5}}, 0x58) getpeername(r7, &(0x7f00000018c0)=@in={0x2, 0x0, @remote}, &(0x7f0000001940)=0x80) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:08:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x1000c, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0xfb6f, 0x14800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_io_uring_setup(0x6a75, &(0x7f00000000c0)={0x0, 0x7310, 0x20, 0x2, 0x12b, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) 00:08:36 executing program 6: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005"], 0x24}}, 0x4840) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) timerfd_create(0x9, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf2504000000080002000400000008000200030000001400018008000600040000000600010004000000040001803c000180060005004e210000060005004e21000008000300e0000001060001000a000000060005004e2400000600010002000000050002000000000004000180"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r6, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x17}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 00:08:36 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:36 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x8080) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) acct(0x0) pwrite64(r1, &(0x7f00000000c0)="a3", 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200), 0x4) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000002c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 00:08:36 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa7ffffff00000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2539.417090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2539.460423] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2539.522143] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:36 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6361634a7bd5743068703d6dd39c92f120d1fd0e502c8e303ea826a3"]) 00:08:36 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) dup3(r3, r5, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x1010, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:36 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa7ffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:36 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2539.806842] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2539.816543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 00:08:36 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_delete(r0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x6, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clone3(&(0x7f0000000880)={0x20000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0xd}, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/224, &(0x7f0000000840)=[0xffffffffffffffff], 0x1}, 0x58) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="040000b23800d842ad1a66307045d9955e260dea4479e7fa656e13eb0346724258017792103c692c5a0aeed06590d3e5e01d5caf5450f26a9f412ab46acd2b7c95282b41e63c303c15a6073cf9e0aba7bbbd6e25b0faf7b3fd01d666b51fc7365193e04869c09bfab0022a6d5d2040823700f4601eb1ad5dd760ba065c872b4a7a6e50547600faa25202a64b3e932a13e7459a5640aa805f4fa9955ab4e521779ecc40f9e5e4a552fb8fd6701106a9748ffdda4a20a539def9de3cc25d08cfd55d3288a1fb942f04097658916cc8323fee0fcb75c9d3affbdcd68a71c4cb15bb233ea0d4"], 0x4, 0x92a84b769ae0e8dc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) capset(&(0x7f0000000240)={0x20080522, r2}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600410d0000000a0000000000000000"], 0x14}}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x4}, &(0x7f0000000600)=0x0) timer_gettime(r4, &(0x7f0000000700)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2539.855593] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:53 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = epoll_create1(0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4007, @fd_index=0x1, 0x1000, &(0x7f0000000300)=""/175, 0xaf, 0x18}, 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:53 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffa7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:53 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:08:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x5, 0x8, 0x2, 0x4, 0x3, [0x3ff, 0x0, 0x80, 0x83]}) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r2 = socket$inet(0x2, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r3, r0, 0x0, 0x4000007ffffffc) 00:08:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, 0x13, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}}, 0x0) 00:08:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:53 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x3e1a20, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) dup(r3) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180), 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 00:08:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdf74, 0x81}, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0xff) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x3, 0x7, 0x3, 0x20, 0x0, 0x4, 0x2, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffe00, 0x9}, 0x600, 0x8, 0x101, 0x4, 0x5, 0x7fd0b099, 0xb4, 0x0, 0xfff, 0x0, 0x4}, 0xffffffffffffffff, 0x1ff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6b8, &(0x7f0000000380)={0x0, 0x8533, 0x0, 0x2, 0x1b0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000400)) r6 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2000}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000280)={0x5, 0x7, 0x9}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 2557.237057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2557.266412] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:08:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x4e, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000012c0)="37c90c7a45ead7c0bb39312fbf682aac640d31b5e373fe615837a99cf546fda4582fa347d3c9a226aa702860eb3b9aedfc", 0x31}, {&(0x7f0000001300)="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", 0xfc}, {&(0x7f0000001400)="f3ca848b2756b92c8587c107f733952659c443316fa27e4cf2ac14a29202967aaaea6bf9c3db6ab2a270f7e2f3568ec84a0a8e94b10ea76528dfaba40ea918ade6505da1cecc7029ef65ea3bb90380abe658240c97bd4f6d3f", 0x59}, {&(0x7f0000001480)="7b052ef090bcc77fafff631f374fc925cc8470aafb208311f6461d9a8aeb1d6b3c0626", 0x23}, {&(0x7f00000014c0)="2ebca71cdbb46cd7355aa49b7c2335bf3b9710ab712f3006609562691f91e63acf78ffb0452a15cebb02e8b71fc590c51e7484332bb00fee254ea5acceff5dd6ae39e86a52740daa97936f828e3212e1ea05a518910460b1ac8c5b818e308aacc83a2a9ddf15cbf7f68a5f93598201ac418a94221d2213ef445453fab35ffb43dcd0425c89a07db3c13ac6e069c56455acce13464268dd707b7c6993", 0x9c}], 0x5}}, {{&(0x7f0000001600)={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001640)="9aa347018744abbe09efed", 0xb}, {&(0x7f0000001680)="5a6fdd50fd3d4d5f81aff2844b3ef4d1152affd8370d3c7c94a443f502697ce29409c0b162c08ca42149b02cccc605a2333b4fc84de417e4adab42624277495430f1ca0f", 0x44}], 0x2}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}, 0x1c, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x3, 0x20008010) r7 = open_tree(r0, &(0x7f0000001780)='./file0\x00', 0x0) clone3(&(0x7f0000001240)={0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x26}, &(0x7f00000001c0)=""/55, 0x37, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff], 0x1, {r5}}, 0x58) getpeername(r7, &(0x7f00000018c0)=@in={0x2, 0x0, @remote}, &(0x7f0000001940)=0x80) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:08:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r4 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) fdatasync(r2) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x3c, 0x0, 0x5, 0x8, 0x6, 0x5387, 0x0, 0xe4}) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) fallocate(r2, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:08:54 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00210c00000000000000000700000008000000000038d15dcb1909000014000900fc0200"/54], 0x30}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 00:08:54 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r9, 0x0, 0xf, 0x0, &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x8000}, {r7, 0x1000}, {}, {r9, 0x18a}], 0x5, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0x9]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:08:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:54 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001180)=""/4091, 0x18) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x800) 00:08:54 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = epoll_create1(0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) 00:08:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:08:54 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2558.001577] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2558.037575] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:09:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x4e, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000012c0)="37c90c7a45ead7c0bb39312fbf682aac640d31b5e373fe615837a99cf546fda4582fa347d3c9a226aa702860eb3b9aedfc", 0x31}, {&(0x7f0000001300)="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", 0xfc}, {&(0x7f0000001400)="f3ca848b2756b92c8587c107f733952659c443316fa27e4cf2ac14a29202967aaaea6bf9c3db6ab2a270f7e2f3568ec84a0a8e94b10ea76528dfaba40ea918ade6505da1cecc7029ef65ea3bb90380abe658240c97bd4f6d3f", 0x59}, {&(0x7f0000001480)="7b052ef090bcc77fafff631f374fc925cc8470aafb208311f6461d9a8aeb1d6b3c0626", 0x23}, {&(0x7f00000014c0)="2ebca71cdbb46cd7355aa49b7c2335bf3b9710ab712f3006609562691f91e63acf78ffb0452a15cebb02e8b71fc590c51e7484332bb00fee254ea5acceff5dd6ae39e86a52740daa97936f828e3212e1ea05a518910460b1ac8c5b818e308aacc83a2a9ddf15cbf7f68a5f93598201ac418a94221d2213ef445453fab35ffb43dcd0425c89a07db3c13ac6e069c56455acce13464268dd707b7c6993", 0x9c}], 0x5}}, {{&(0x7f0000001600)={0xa, 0x4e21, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001640)="9aa347018744abbe09efed", 0xb}, {&(0x7f0000001680)="5a6fdd50fd3d4d5f81aff2844b3ef4d1152affd8370d3c7c94a443f502697ce29409c0b162c08ca42149b02cccc605a2333b4fc84de417e4adab42624277495430f1ca0f", 0x44}], 0x2}}, {{&(0x7f0000001740)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}, 0x1c, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x3, 0x20008010) r7 = open_tree(r0, &(0x7f0000001780)='./file0\x00', 0x0) clone3(&(0x7f0000001240)={0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x26}, &(0x7f00000001c0)=""/55, 0x37, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff], 0x1, {r5}}, 0x58) getpeername(r7, &(0x7f00000018c0)=@in={0x2, 0x0, @remote}, &(0x7f0000001940)=0x80) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:09:15 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:15 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:09:15 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x42000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2074, 0x0) r4 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697020060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dee001000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x84, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xabe6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4c000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:15 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x303902, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10, r8, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:09:15 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa903}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) r2 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 00:09:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x0, 0x55, "cabc732fa5b1c7d5d626fd09ebea6e1d"}, @NL80211_ATTR_FILS_CACHE_ID={0x0, 0xfd, 0x2}]}, 0x54}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x1, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0xfffffffffffffc88, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "8a93c5c4b83142b1f395321d8f9831e7"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x170, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "c3ecd7c7ede283f6609b9c79f934ea21b288927f6fbcdcc7c3651732ee026454d0b45c4abe995f4a8a2b3ffd7663473020779a7b53614d0c83e21efd3e53f691a1f991d7308ce9bbff6f52c2ea1447526dcebd2648411bb753dc427184f9f91d4731046bb681feed824db1cb1ce2d53ebb9e754cd5b5363e02de3162e28a9efb3799febd1355fc9ed0c1b00bcc4919fa93ed4f546bcbb275321a8a82a6991c2a63654c875594211d757860a5fb54c72d4e8bb239886d76d90e85f5935a0c17924bf20778d792"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_DATA={0x5c, 0xc5, "ff2a9b2eba7e4f3b65e0f0f49ba6aec3e887bd432ea2a55bed984176cbffd497b2ff56c9b009f13430e0c84ef4c3a3753ea44274aa57767d3e572e3681f0e3d0ccc7a3ae89ab89e6b439050fe170c19d572cf852c949cbef"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000000}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040005}, 0x840) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24004850) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r8 = socket$inet(0x2, 0x3, 0xff) r9 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r9, r7, 0x0, 0x4000007ffffffc) [ 2578.959760] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2578.987363] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2579.053870] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:09:15 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:09:15 executing program 5: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x440c00, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) unshare(0x18040800) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000440)={0x3, 0x0, 0x0, "dbf57d"}) unshare(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x1e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}], 0xa, "863d9ccfbc3e6b07c1957f07147b07e33018b08994e2501f663ae8e82045f24967f6954c302a9be464d1c9b0ad7314b67e0b74a733598cfe98"}, 0x45) unshare(0x4ab2c094c389d107) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)) 00:09:15 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:09:15 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x39) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) io_uring_enter(r6, 0x75ab, 0x3902, 0x3, &(0x7f0000000140)={[0x6f5]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2579.675792] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2579.685211] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 00:09:32 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:09:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xd57) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:09:32 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, @perf_config_ext, 0x1014d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200}, 0x0, 0x10, 0xffffffffffffffff, 0x3) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001980)=0x0, &(0x7f0000000140)=0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x10000) openat(r4, &(0x7f0000000600)='./mnt\x00', 0x200080, 0x43) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, 0xfffffffffffffffc, 0x355, 0x0, 0x12345}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001a00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)={&(0x7f0000000440)=@l2, 0x80, &(0x7f0000001900)=[{&(0x7f0000000640)=""/222, 0xde}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000740)=""/128, 0x80}, {&(0x7f00000007c0)=""/117, 0x75}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/166, 0xa6}], 0x7, &(0x7f0000000400)=""/63, 0x3f}, 0x0, 0x40000002, 0x1, {0x2}}, 0xdc4c) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001a80)='./file0\x00', &(0x7f0000000280), 0x4010c44, &(0x7f0000000340)=ANY=[@ANYRES64]) creat(&(0x7f00000005c0)='./mnt\x00', 0x195) openat(0xffffffffffffffff, &(0x7f0000001a40)='./file2/file0\x00', 0x400, 0x112) chdir(&(0x7f0000000300)='./file2\x00') futimesat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) openat(r1, &(0x7f00000002c0)='./file2\x00', 0x280, 0x40) rename(&(0x7f0000000180)='./file2\x00', &(0x7f0000000380)='./mnt\x00') openat(r0, &(0x7f0000000580)='./file0\x00', 0x20080, 0x4) 00:09:32 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') r1 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="70030000150000042abd7000fddbcf251b0000000c00378108004a00e6803d34fef7b5d1f85b8e0281cc56419d97a0c8c57717e32e4e0631ec5849a5e7f3fbb7c46338d77c67b35d4c77649c75a13e63656b2997c63311bc0e46968058760251d79f785816f85b261e03bea3171876133022efc86c1c8bd689bdd93f3c364d3445bc44", @ANYRES32=r1, @ANYBLOB="81b7a71e652957ed2302955f466e5c6d557e22ea675c4434c5b62afed5124f37cf4c6458799a154f2990a48f27bcd91ca6911a58ae727bc9767d678edf9cc3c6a768d2dfe2ebc032dafc2489993c72e2a567269c1f4a0724f86a28665f09c782e1782235bd7aeb7a90775760792902dcb363e4ea2eea1648c981800753d54fb4c1a4e77c2c7ee0482e48b25d8eb31039a58efc61d2825c79a4e141e551965ddd03f2a082962ad9214e32dadf7af02d9bdf9b8aad479419fa35e08e49b54e4b2ca029d0d67709368d603ee62823a68c9737f8f999c8da77ba0cc9f2ed634580e4c9433879e72844f25dee13d5096f1cf9c82397f7d9ebc8f6feab14b16e4ca875b66234ab8e36cbb77eb12b1360df91d3b0f10162891ead5760419f095f64d69fd9a8631213fc00f709d39772576614fc4048d5fd5fa441de8514f52393f6bcda6a58350689cd039e9922d9ad44783643b76f0163a3dd037ce70c23e21a26e48315c9a4b06d9958b4a4eb1f9cc31252056d6de201622fcd7e040f636fe8bc1efcac4608c6a72f346dc7c779d7249e8a0af05b64149c433408548462108cff2bf900168046df4d7ae012e10e25c42b1b28b6e8e96dde54a3091403f8a0a2748eec464f0527ab881eafc5d60afbcab1ec195af0049e98aa2707f34ecc55b4e761ee5e2f33ff3d2d08529359dd43bdc2d6d3f9256cc4fd2d3fcec810964be677fd9da00c1f5c6702394eb1aa29d860ff4af94aa54dd36c0429a6de8ecd95ca799182b9c93282f796f8f8b4b90ccedae821d49293f3d15187e1eab1c44f1ee645fad7f504607fe8ede36990a983f12bf58a8eaa2efc2055a8e1c7ef86a57363c3566991379849ceea710dd87523c45689b60f8f0498ae8cf903daa4d812c53127d99ae2a590d3d992def1aa659c5c46d38036012d047ca979a916adf55b207d537371cf4c183a437717912bfc4d0df203d707945c88ee8c7809378c0bdb8f2c3126385c1612df3e835c4f31ac6760431413965db378cb66a5a49bb118fd61fc5a5df5"], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x89, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f08004500007b007800000000ffffffff00004e20006790785ca5ad596728f7dcb27b87352dcb9872b6ecddc3771b74097af9cd2bd0e04668b6794b0887d80dd2643c4c36069e6fd802624af6b294ab32e2c99a5bfe9c48548a14726aea46086807f4e012df15a4f18e27946514e80b000000000000001d99782e834b73"], 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) dup2(r3, r6) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x10, r3, 0x10000000) recvmmsg(r2, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) ptrace(0x4207, r1) 00:09:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:09:32 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0xf, 0x11, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0xff, 0x0, 0x1, 0x4, 0x1}, 0x7) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0xf091491809fb8ac1, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0xffffffffffffffff, r4], 0x2}, 0x5f7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:32 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f00000000000004", 0x1b, 0x2100}], 0x0, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r5 = dup2(r1, r4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0xc4) 00:09:32 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xa7ffffff00000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2596.362245] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2596.455264] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:09:33 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xee00, 0xffffffffffffffff, 0x1000) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r0, &(0x7f0000000180)=""/109, 0x6d, 0x0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7, @private0, 0x400, 0x4}, 0x80) 00:09:33 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:33 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x803}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000140), 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:09:33 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000200)) pread64(r1, &(0x7f00000000c0)=""/81, 0x51, 0x669) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index}, 0x80000001) r2 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index}, 0x80000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r7, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r9}}, 0x7) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13, 0x0, {0x0, r9}}, 0xffff) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) 00:09:33 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2596.655044] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:09:33 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x200) fsetxattr$trusted_overlay_nlink(r6, &(0x7f00000001c0), &(0x7f0000000240)={'U+', 0x100000001}, 0x16, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:54 executing program 5: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) lseek(0xffffffffffffffff, 0x100080000000, 0x4) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 00:09:54 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x15ba, &(0x7f0000000000)={0x0, 0xca5b, 0x20, 0x0, 0x2dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r8, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1, 0x1, 0x1}, 0x3f) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x7, 0x80, 0x1, 0x5, 0x81, 0x1f, 0x0, 0x2, 0xb04, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x50d3, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x4, 0x81, 0xffff, 0x1, 0xfffffffffffff800, 0x3, 0x20, 0x0, 0x80000001, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r7, 0xbbe5e524575ac508) 00:09:54 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:09:54 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xca9a}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0}, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r10, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x3) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x602, 0xe7) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:09:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='coda\x00', 0x1004, &(0x7f0000000100)=':&\xb4\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) 00:09:54 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="8b26847e45e3c57872fed084944dfb", 0xf}, {&(0x7f00000001c0)='f', 0x1}], 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4ea81, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0xffffff9f}], 0x58, 0x64f, 0x0) syz_io_uring_setup(0x7660, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x6140, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) ioctl$TCSBRK(r4, 0x5409, 0xeb) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x202900, 0x0) syz_open_pts(r1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0xe, 0x0, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="fffeffff2900000428bd7000fedbdf251c00000040de11b514491915947368cd8ac20b51b70e0cd2c5da54c197d40c1db8fc57c5341e4f639436a9170715158c42db9a6be2d338e69436a12c55edc0fcf3bd0f55a36a08007700ac1414bb04003f0008004d00", @ANYRES32=r7, @ANYBLOB="74ffd8d60089"], 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index}, 0x80000001) syz_io_uring_submit(r8, 0x0, &(0x7f0000000740)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd=r4, 0x4f8, 0x0, 0x0, 0x10, 0x1, {0x2}}, 0xe76) 00:09:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2617.857718] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:09:54 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10a}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) read(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000240)) 00:09:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x2, [{}, {}]}, 0x48) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:09:54 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4776eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9df5b23a6e9347ef97a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/195]) r5 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x12b0, 0x32, 0x400, 0x70bd29, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x8e, 0x0, 0x0, @pid}, @nested={0x15a, 0x3b, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="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", @typed={0x8, 0x87, 0x0, 0x0, @uid}, @generic="af313566c80c994c81f11cca741f62138bdc24cd612d095a0f6627762d7267b571762e67c2d41fd3009a0be8a672b95b21a140b9a6c1e2833ff2f58c804f8970068cfbe1bcf0f934df57"]}, @nested={0x1108, 0x36, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0xffff}, @typed={0x4, 0x55}, @generic="27e5a60f22423c2828db17e980aec02cbf48946a749e96322c2e3472d7f5582a61d74a5f2da6d047075b10adeb310bbcad630a8efef2ea31545c7aa054cbec96165da9ec35b296ae784665f70204c1cc928cdd3a98e81b6702869162008ace1f92c22a5ab0bc32bdc1f8a05dd1270a468b9b644da6f4cdfe268bc729ce64c67a15e0df11759237", @typed={0x6, 0x8b, 0x0, 0x0, @str=',\x00'}, @generic="0b3b642d25d905ff77c39083d0190ded1d40569d41ab29923ce33b0a1f8c9329a48bddf806f4f7a176bf9be648995581f9a24bd0fd9b1c8d470187bee9d8dc5dca59cd14dd9b63a84420b2c4e7", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x6a}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x6}]}, @nested={0x24, 0x6b, 0x0, 0x1, [@typed={0xc, 0x6d, 0x0, 0x0, @u64=0xba}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x5ac8faa2}]}, 0x12b0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2617.953547] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2618.002045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:09:54 executing program 7: syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) r3 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffff, 0x22a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = epoll_create1(0x0) dup3(0xffffffffffffffff, r7, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r10, r6) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:09:54 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4400, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2618.067232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2618.068865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2618.071203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2618.114008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2618.142949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2618.144685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2618.152045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:09:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:10:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) lseek(r3, 0x3, 0x4) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 00:10:15 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) r8 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x3, 0x1, {0x0, r7}, 0x1000, 0x4, 0x0, {0x0, 0x0, r8}}, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:15 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffe}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x8, r0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, r2) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x3000009, r0) gettid() pkey_mprotect(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3000008, r1) getpid() pkey_mprotect(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x13a) r4 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000200)) fallocate(r4, 0x0, 0x4b0, 0x2) fallocate(r3, 0x0, 0x0, 0x8800000) 00:10:15 executing program 2: pipe2(&(0x7f0000001040)={0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) r4 = eventfd(0x0) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x710400, 0x0) r7 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r7, 0x0, 0xf, 0x0, &(0x7f0000000200)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001100)=[r0, r3, 0xffffffffffffffff, r4, r5, r1, r6, r7, r8, 0xffffffffffffffff], 0xa) vmsplice(r2, &(0x7f0000001080)=[{&(0x7f0000000040)="e419543f032efb3a595ee221e7282adf96dd152ddadd85e86b27042523e46c1a2e59e001551d59fb0e3a8b9f7518845a691cfc955a788df69eb0d60da8fe9f7cbf350479a3e0ce8f96c20530b12a34ce604b789e3340356f82df62888dbd47df8ddd4697a0c4f315c59ed293f6835d59b4f289cd0dc166c057390afff64f53f0060c75d12ed9a0e3e72bf3bf94e2d06b2a660eb4ea61be4765af733de0318e726e40e8dcf8063e79d8e6011a6deceacfa68dc0d79fefc9809624dc94b41dcde0b710c3ed9a0efa707bfc699face9c6024ab10472caabcc4c43190643e867b77c4ebedeb574b6c326a7bc997ceb800dffda8ba83407087a6303ffbfc42e03b7c415e1639fbb5fc89602a23575f9b292251c2bd9935c642b6c63e93448f6abe106773b41362cdeeecc9a252abf6dfc42658cb2d8b6fcaa3171b15c98043af017458d8d0e80548932a767a9eea23c2cd84a9f5dff2d2c2328f4c918e9ce63757cd69013e3318b49d2f240a6aa112fe7ee631a6eac1e661b05673cadb597a1a24745750d4e6538888dfc05ced1e85ec47727eafd4c7f905ef2aa7dd17f78e82fc0e2e54b795ac880bfd735842dfc16bf18457dd0de1b630e92450d1b22aae69be82a3b3c2f9096ff4efe59d5d4b7a5b07090b5bd805461c072e1d799971848ca1e3304160728f7bb28bf4480b01f8387d142ecb2bab30295e9f91281ae44bbdc2fb1406a21a372ea75ea63b174dc852243533de7d66d0ad663d928c4d9096c4e53c4e130afd8a69395928f3a06c2a436f7ee21f66260269af17a5a9474e9f4ec5322f5abcd9ff7b7402efcfa57e5a854c348f115e87d49fa0f830b663bc7fb5432bc64f39d025c285d8252ac39d1f78e5412b3a640bd0e11323e1a45cccdf59b011cbdfb6f023cbf1613a1c74c2baf26fcb06172a3a8ddc57f2cacdcdc7ae7fe41365dee77f0605fee896c830130a21cfd202d5eeaac9bfeef41b6980dbaba5d9fa523c3687fdf562357e4e0af182d44f59d1cc50a3c52fdbfa63763d5cb06f9a0779d2b8eae2d02a35a0dca592bfb1835499a12caf28ab5038d6fb7bd905111f94083d48fb2b9400fc2e0139c1c31a5abd53f0141c0933b6a0c0f3f4629f95202fb6301d5707b0447ded6926386f332519d75e5a3798373dfd8ac957def295bb345acffabd616eac09937f310606a02ec2eae9edfd5a8721b432ebbbe86e95f18d82a54b4a3dc1290112540dc34798e794ee73d87fa668794c06b87f4307cd894cb4ef5dd6d9cfcdecc63450439c937018ecf95b16cac6d31c8703acb861bc66b8a3d70f2f8310f6de6d59b7f19a6bf49e1935c1ca3138954b7a1565164a51ff38e34118f76f66ef130e861a93ca2a8c1b914cfe2ce9ae4bd5f049a7750ba75896aab6a2a42c5dffac474094c33907d218a75eaab1f0d20ad212b8c43415abbfb1a94136d9372498c38129cb4d4506a57771062eff2c04b861ddd02bd82b719cfe7126f91d7bfe239c3e2e4f7ecd96ae3b8b8e3553731eee61e786eaaab50116655b37c0e9a35ac3223595cb50176fb9d9ff867b3ad6c00e3d31ae538cc3c9ab32d98cf4152bf1e5c7ef5a39743a92db256c000c1be7a40ecb8d6fe494882cc525a7f97152e8dfc1a24fa7149986773c7b6c1b05504078e773860d82ff8251d5af7399c35a923ec9c2dc2c71f73dbdf0f5d9f25ed3bf24193784d10627b6ed97cadd5315e79cb700ba763db2749f3f931a73475cf9d8728ad0b75b42e9ed8a3c57eb584d21f8eb1f75e2750c52776b725ebdc4e130708440ca7a151833432d1b47e79ecda0b7ffba91aa42cbde65e58dc28797fc00891628b43d01f566e32ef0f7a3a79e1cf48e4a36afd8c1aebc7acb7ecad1cace3d57e887127b7affde579e181e447928239d448f4e9d199a5c4855b00677e6e9850383aa1db17ed0713703b217487196ded7cc2c3e6b7026972e870f22ed98fd58d2a2a6bbe3bcc9196ab28165795703dc3c11fc24a39843c7ad46ac740221199a16dd5c7ba786073f41ab873b66c876ceec827af2c71389afa124b08951972de1b3f30cbe9814e08d3f3b739b153c8ca4e8253b8b92945dc09e82763eb5d2bc5016031762e580ba42288c57f9c12e26b9a65f410517aedf8d6da32941466f17e8cbf796799f3d7e1ede241625bce464417752be142206a2af47bb348da9690ed95d3b34a71f691630552e6113908f5b677829373a47a5bf817f4a8244a1d477cb40544a80575dcd56050166256d75f71c3cf43fd7a74eb3f7b0704576b8f669fa3e7f674802c13f461bfa0f014d411e1e2dc704c3d8fec3d716be74c836479dab873999fc5a33aba8341cf8262c0b14fb8c7ee0c4fb527a5fb7a64e0f9adcca22ba9df9730f5e5d54ee1291d434ebd4646d4912e23707ad76e92bab0da691af46cd19b4295643d7434ae3fe4d7d76b32fc77bd256e80c5f736864a78397312430a3a3a29b70371c8a95b43a7fb018bb8c11c852ce878f17217e93e862ff216eafa129e55e88072131630d16c31490f156b29ed3c2fb867b3c0fc3fe188490a3886aaee78f2a49bd9037029887939105c5da07b1726993f845d36fa1b8608a67cde248e0928d318349cdc735ea81c3cd52dab646bf8ca9c528c853bf3b16adf67b6d077e54efda81d112f857d43459be69a4c019aa13e12714c3ee7196fd4dda2446d1f416b94fe1e2c81e522c56533c1bf5cde972be08f01663a2e7c9f0ea487ce403816c4ffb30d1fddfb48278b300676749dc968ca9aa95aaae1919cb2e60d7f80756c4611788d48aab32e38f4d607702e9581fa97ceaf5ca4a16ebd67adf95c27e37c613a125ba35e9ca10daab1d6042afd85623c40ec9c132383c90c9b2c2696e340a449ebe58dcf5df4f3b75f04b322c1cac6211b6d2662386786a4272b549bf4d6bd7dc13aa67836f135501358bbd963a8a23780a5c12bd414e5a4fe11bd8f17a96f313d610d22b5972d697440e2d335df8316ccef0ecf7187c5999bc995a613fd5fd0ac8935cee897c1f7aef7dde2b2b906b9279d99c5776013d43330ba4e97729132a118c4334f2122648a5524d8e1c4bcc78c1512d5a5303f0ce1e7c70404e40c07b5ef527d9d8454fe806856123eb38aaf3f2e14233466d78e2ad3ed6de81ef57bbefc69fb9af566ad94c9eaf0cdb3fc324ee9f82ff63692b1cf8f7b0acd5b25345151f12c27032f6fb665c04a34333288e00dd5073f964eda4cdc7fe4c12e7a48118ecdc63167d18753e101b7c507b01f205a774780375e0dabcbd64e64562f0495501b65460f3ff2d624a212c162578374f7c1f0f06f6548931e92f6021aab1400290104d2cf16715dc02e42bb002160a4544b4ba9e58944536f5381291e60f629e21fe03ba3d1d5ae06f283e342b6c6836c8674b070e0cc3034a2cb5ba45ea2932b0dc24ef199233091d03565bd0bd1b7fe4ebe4ed62ac8e16979b3e10997d4fb29f286334e4d7ce20e932b70fdafa85a42758e714eee33653638cef88cb033cd515e9aa178ac7375c51fef07895c08ed0b3a51150aca4350d9360a313847fb517b6ade52bb9bc6738fec5aa1f93bb436b88c1fa9c611d3f685a6f860f832e59600ead15067217fe0c3501dad29f815f16c39af57cd1ab894d26276240b1828ac68042a75b92c34151cfa6cd05eedfdb3f2f4bcd40476eceb334c858e239d69df17565e92fe1a161e9848907b6557eb009c3d24879cdcb19e835612825f490d453123a83f9c9de8490791144bef3f7b6450445747c247f80003a2e65aa1c077012ae4bd65e5c1f425ec0d0573fddcdf475456e2d734959835ed20e8dfd4ef4932c42004557c409e09c43daf92651f63c40af8630df9e8e84578b5a628cfce5b328f115d2532469d2b4218ea87fe46d8d06616d6fab54cdfa32f14b76199bcfd21b13f8a72376f549874b118ceed00d4106450100f92c87dad3b93f03ead01f1a488362aa4fec5913c4d98e4aceba87214aa241f3727f64c52ce30383ca2a5b7115b67d4a5be7aaf817fc22f2a213d6612a598fa61086bfcc49126c8c7f6933f4fa51f1cc003732d51ab7d80b8c0ab7e77b51f96f4e1d866f29e7c09bef6ad687ace636e8c59232f929f3b1b19337f6a67bc79a4e09daa48b41f55f56b7bf3d5cb80b58b6786b41e1da2156449b224346fc21bd52ccb2d5512b8e210201e11dc09485828b2eda5f3586330dbe80135939d7d10c9eadfc1940d5c4566cdf35b4945e3ea3407dece97ef37fb98e9de9552c7b904c1ce06ff77d2cd0e738fe6a0d904de2964c794d87d70746579746d6a74fc6f708e609cff51be1228932165c2fcfe02ea845f5c0eab8b416604eded565c341a16a77993322ac8751b90715d1e75c37245c598e39a6b1272bd38c299ab93c34cac7cde6f01ca88b889f468721c8fe27d84eab5fdcede8cb0ecc7c102abc9f7dbc4c9e3d2d76ab3f8a4de79eba6427f62866ffe1660b92a43bb2933b60b9fd4b37dbb3ca612b802f5165f27315b2bd36be7ef5d0cd2c064ae8b26545978a7c8c03c8a8fde739f516928a387e71b034cc621add347e14bed5a485e75770a1279466de0c48e9e4377af75b23b320e7bc5c1264f6687c70a9b9f7191560c6ec0998a3b32f64ed7ce9a911e563aa956967cac766aa68ffa2464e0d281716cc5e72e5ac000985c2c0e6a905c444e63b79d391c74c60ba03b0915fbc1baf841c88706f665f77d4745532340e78fd3bb4989ec45783bdabf315d6de15fa38eb736efdcda493f7ae4c23e9b26291fd17e97cc4402d61eb34ec49a3f3ad057e268472cf3328d937d7e7a7b191fa02a75c3f44f512e0569c7a86314b74bdc50ca225dbaeca382bd97f462b2875a7bf8ccd96e1dfa3c882379b7559437c424408065986dd16c6649f7c80997518a76531ce798c74ce7ddfd8d030bc54bcfeae164336693b96b5c158fabadd3e96964065523e085e0dcb5f93ae8be31e2b2ca8fe5ba9c76383f6606ed11d07b29f194dc0c49e23a404f15a3b9ab6cf571aff668085eddc6599881a335d4e40cdc46f0f3a08249cf30878373ee3e5084729a6b444683f7541b49e65fa5cc3449655b628fae538b0e6af12b6dd64bdf348b1fd9d16e680d1043f0064642d937032a7b54ef892f913acd053f10d3536233b2019f9d8d3bf2933cb59136bbb39f82ad67cdf2bda565452eddb7ecf08b2905bd80238e18cc1f286967d57efcf9d32c89d2dc4dade997212d32681aa13160742444933e91776c3169a6b866927b81de4dc1b98cb29df47aea56571b46c5a795473d523855c7b190a311b0c0cf656dbebdefae64cd0b75e5f53fda5a2bef64d816a59298bd61c2b4385e97f1a04da0c026f811f2c141e66fe21f2ec313bfd1352ab517e93585f0aafb7ddaa5812c4abe5e9a537d5024622a8c7a4654ea161fd16724a5666aab94c2169e6748018d81c733e84da77654febc1541994de66dd6d0e8d7ecb89b1c132598a62422bbae1a79c6aa75137ac5ff8abdb95aadd53cfe9be4fdfdc55b4f16bf948e06d86d0061cdc30e45ed0144d92bb0b17b9cd7f7bcb47e6f22c534852c6b3b94d5353435df4d46a410f74a62550b6de1a3af3e2d56400de8766a05e3d873fb7671e3ff6370fb9a4d6464bc2944b1343fc56cb45615c1181e189bf5f9c9e7ad78ead49ac041c1b5e868c7fb4a1702bea97a78693379", 0xfc1}, {&(0x7f0000000000)="d4a05aa07208475621b4c6c8bbe11f4c48b4ca9214a31bd6c60a94a60bd771228c0974df0bb75aeb0961e3eae5", 0x2d}], 0x2, 0x0) ppoll(&(0x7f00000011c0)=[{r1}], 0x1, &(0x7f0000000b80)={0x0, 0x3938700}, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0xff) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001480)='./binderfs2/custom0\x00', 0x802, 0x0) sendfile(r10, r2, &(0x7f00000014c0)=0x2, 0x8) getsockopt$inet_int(r9, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000001140)) 00:10:15 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) pidfd_send_signal(r8, 0x33, &(0x7f0000000240)={0x1c, 0x30, 0x401}, 0x0) 00:10:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:10:15 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:10:15 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2410d0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=client,access=any,access=', @ANYRESDEC=0xee01, @ANYBLOB="2c756e616d653d2e2c6163636573733d7573ff03000000000000656e642c657569643d", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000c00)={0x0, 0x0, "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", "a5c1b400b3f8aebb17025c86d652b661a9f5578cd953e44405aed04badf87d9c10236b343b8e4f4718aca4d9915e8f7f160470b22e7ebcb456a8fe71f90256c6654beaeb9a22020aef00ebc6c82fa3ded9ebb5aa16fd6d8dbc63b84c63dfc18421c4a27fab55bc8e6f7cd589fc37b6c95a0ed352ab65f00880047d52ccaa6046d120437e2d3063bfd40486d8e0e48767cc4dc98da94dc3cba5cf72b6afd419f753e22036f0ae05c048abf9c712382288a62830c5d31c7b3e083b8ea20e3a6ef92ff4b02cbe97c677a8ec82224169bc4b70cbe3d25cd7c2cedb7d277213e15e285e04e4cd8767b2c6d8c72cee77256bb59355592141f66e8c56f1f0cbbceed3951e5384886146217669896c1fd903dd3ce5510b5b4b6ebc60e32ef9427d6886ce5dad86c211e1aadc965fea33ca0d0b817c733df462e6f865a4a094b770da4751807ae8fffa6a557d22cadec7b87d1d2498cca7bdde36caa7859350d9763b8513dc9d1eda77ea79cd4562f8bd51d3ec08b79753bd54ea909a04116ff8d5c43f7a6522373a4a80b914fd246fb12fd22065132ecaaab754e3256b103b667420b0a1206417f0c7a34b1a8d9415d98b64134bdbc372649a777da9edc673335dd0f274a730b55678cebc58c77676690f34ce4bf1b8b32128971f089c3d0da5782124b3a170f66cd6d5513c28f221cf2256c0e967fa33134bd9d0a8f63659412ba3860e9dcba8e65356acccbdbfbba2fcaea0e150e9eb72414ac433112c4020c06c874950aa91532bb69f5cebc7307d55dbfd2184bc885affd8a5d9057c8c543d79704c2fff163691548749e6b34a6c481cf73792bcd51fa80c3d42f07a227494e2f9c3e64dcc5bb68cf2e2aae21a272b2d9c2e093429f72d5b2e7e7c16ada6b5ce6ffc2b23cb8e4ca331a947a9eb01566543557fd6d566b906340fbdfb9669b3869986b0fd1964ccba5fd32556d6049618ff8a8cd50f2dee3531077d45e178b84de8350f7d431eba5705ed25c24f706a13994c837a8360bc69d63d5d45c94213707ba06c3537e1528c56f40d2315ee890088f0006afe9fb999a0f60b9ba8d0a33c4e14cc883123c1519a1854f0fe6c794e2b2d36cd917c02cf95b5074b62c9dd6ba8d0d50116aa0907c16c1f934e828a7db7f815337cee2aee847bda1339435fb4035b26688a10c1b19e7ea0326a0379a92e03a28921572cffe1de3bd67f065a1cb2158a16453666c982a6cc5c9afc78721ede14f1a818c972ecd610a424978fb2fcfadc90f63ad9d837c4de664a77b3c14fec7068172e754509d54adb605bdc9eb7c4d067d6cfd00f8456da9bc34ee7d0aa325258baf89b9662e56675304d3f1c2bdb27abaf8617680277697602324ba555a0cc623b97084af20aff95bb2534aa8eff6ebbb5cde0757ed362cdf6f91534d58ece36dfee3636b1c204498a8a0e3aa1a855185bc64305b42d8b20743435b7872ad73eeccc9b3ffa88dfc8235b3c6bc3d25deb240a4abf275c2c7eb572feacb69a8889223e4229105eaa2d38c7a3ae3059690ba052c37c2aac6dfbe25c9a1f9d6b56597bd6ea915995b5fa7396a600b7cccf4b6f75add8cb9e9df6797bb5fbfd02ff768986812bfc94d30d7d5a6900bc6f89a544d4ce69cfd89d41217a728dd480b664eaf5137fb23d416aba88f1230e7fec879ea983fc8fef899448a978d3d54980a5877edb0d5174d0fd0f5831e093907f1fb370848e790cc8809c5c7bdc4b341050a3dde146e67e8e171cb801bba281c498f1883b39f339b3ea96118a78ff0dd543216fd314853bcff836a97faeba868ce79baca99609d619db4d21a20dc42e7d64454afb750c31726c992d811dec96a81a5ca623a12d204a2e388e6ed5b8464ce04be07320fc85a1f5c1c9e27a4c23cfbf6a75cb991e1e82c01bc2c72c9f31c468ab5aec6373364716cc8599e8346af3877d3d2784aaae86b367ede5d12dee9a60c77244438dd3ea00c056e75dcbd3041521928e43981c28228f07d720f9d1a305936ec253e4a9ebd684802e76e9fbe94075aba7b2fd526fac6e34312027b0080ddecba964dacac6099ba3c52ae9605fc6dced485eb41ed16af988cb50bfa78228387de371648ab0ed172c0f77d727c4078b7cb5190bc5e4d88fd07950a713e9dbc766cd440f3e15144572b0413cd074ac13f27e576a5fd692471e7a2ae10cde47e037430b7b704c49288d3dcee9ebd92dea5db2feed76a8759fe4d2d7beb9f9e3b265f115ac2cb506546d38fdd4260202ad2c55f1f35e5297eed6fdb8091a59afaea1ab7c5b22670c4a2afc69d5f449202fef60a090fe56bc4b013d20130ba9e053197d220c8976aa0ea359a8a38bd9be6a11316c9fb9529f72bf039df7545c275463bc9ea1424a60e932b6087a62dd445856ebecff52a5cd331ea0cce23f5565165f3c0147b24de3431435e9ecf6fb78828ca4750278c04085509ec32de9d6e84c5e1844f2872b4ec5628887c0484dc6fc06e6b34901cbd2678abae3f78d8caffd9ffc67564c309f6180f387cf939a88854a625c3499d25dbdbe46858abd75fb2aee00cfcc3b5de6eb78fe0dba602c92b865c5bc1743f0e9a5a36a8803f93c7c0bcca4997c7b8ec42da0a075588252ea6ced9ee54e5f164c17dee6380aaa6a23718141db2dc25788416d85b73f9602f55b5737b55374fdb42eed38c09753598f6a2a646dd1036befe9cd1f29b7bb26068777baaa4257b7af387d7811eff06b259edd322ef141af136855394fc1c714c79c1ffcdabd24026623b05f553a3ecb889f44ba5e2247687253cc07d437d5c7d2a23ee4e6afcd66b4d028e663d78656c2ebc7cf3249ed7880976cae6a9631fef77bdaa1b0611aa9ba569d838159634ee135be5aca5d35d84f539501a3dee1ce015aa451f9bac5f89ed493a01b38d8a179532eae3d26fba26d0083e830e5ea8352e9724cb4ed9da6576eb6c9beb53c88640f9bd62a46c8310815b41a41b0c801c8f9c0e5af5f61541d94a7f14888425e19503932ae2364745cbfc81f22087f577d15efd9ac3b03559ea7bb9766c41edde22c9f62b225a0be26426bbb21ac718044ed1d2951e37a780ad4bba4dee3b09ed86b788c66d6f85d0c1c717a4d38f1f31951f4cf258d43d89dea660e43691a76c368489c57fd25304d901f19344a845efa78ffe44a5c7903b47490ed1ae0e1b61aec2060f16f257874582ad08aefb145c1d41d336fec9b8ceb3f9a0aa5bef258525b377943f3ac7b93ed0ca6fde436a8a73820aa591c02020c6ef462e3e33346e56197a598ac08a93bb20a7d8d1133512405f7a3b1b6e73b27be9f461519bcd3d0b002b73f3b19eb6bbaf63e89070303846bf54f202b129a9893cf9812cf3c77fe67f5283bfb8f01b59e882fc0dc23cae364b3966647f6c1321a054daae07e7b816c15bfa5e898ea4017a5c952c7f0b09547f15b7af6168963caacf3be1be9ee8c1091b7a5cd713ea6aa7531fd60359b0bc60a5edbc6ed4575ea02a985f8a314659b93d0fce8e4cc1a0b6f1e4dd96c0fd21a9ffdefccfbd95e3ac9e0b187a413c925dc6cb64ec768ed8194baa4d607e73d92a6caa34827d5b0f1d03bbf7b5ad6e49f064b24b09baef54079e9cb6dd3baf47257123767f5129e434c62e03bafbf47ebf27fcda1857556d876c899b9aa06e923457e546612bc7963996e541368f63cebd52aec9f2f67d2946c09dd4617b44eab52b3195ae5d342093d7897ed55e43943c5c0ac550461ed2e947377f49d3ed1a3b8efe201f42dd5493ea367997d9c1e1213f1bd61ea63c2b50335339463d065f4b9caad428eef59f7e1647e8f4f54c0311e1ca242271e9f18e5eda4861cb1e74cf6401607218fd34e9bbdb940bf4feb44f8b8823f3a49043d0a25b1054f212a55743f0b003d8273d5a3d6e26bb64e3c727d5222908a211ccaf5ea8d2208e800e74e2e5030c7d23da925729d5574e053b61e0da09ca633f1216c1e74b06e7428d86e2cd8678939985b4fbc53e5e496223d0eaf0f5c9842a3be5d81ad649aaa3747d03ddb46a43ae9e6c691a97a6fc5f2098436ee7ade8715a434235d065929cb5a1e4416882b1aa66c9e12c8d09f6a0f862595a7c5d578c04eaf3b5cce96fc1d59ed1eddaf5810d0e1907856aa3a829f6948519ceaaa30e0e0c6ccb59beba2a216b6c4a8a49c112161fc184eef68338168acf906c62efaa950356a6b8293d4c0b5803e47b4ddc0b26fb0f7bde1fd1b19dd74313ca608d72d5c7e5c9add0aa2b39fdb5e0078016d640a8bb5052f81d18e40141a27a3ea7e9a199ff69dd31c4b962ecdf8483819eeebc8beb406761194f8919ef4fcc26f6d7db2da23d3d3f07fa65d15fad48ee21c1ef4cbf21617c5d40fbba96b14bc33a34408799c95bff5b7b1c23afe7c0b36f77d6c9f0f08517764d014b3878ba3af91bb7da16a67b062ad5799d3287e164f8f78e5e0f49eb7dc3dc8d1a643f5b136215b1f56697f9b8a94dc67985cfc9dd874bc0db190770b8ddde80fd9bbc06324afe847aa2a3101b124a6e4e79db7aea724947a4e1ae01d91288d7840a364d70c6fa58d6ad95f66a4b6dfd31cc553eb997003e7c8cc58c067cc1785752d944b16cbee47e227ec5a1fcfbed1cd573331d4de206c00e6f6187929b5c69199c0eadbc322683fbe4a6900e6c5470ac25cb69344757b7d1e86ed28dc7db44a6f3b7057b906d0b6623a2328f9e1eed2b5fb1d5143bc197093639223dcc49f16973a0fd8e65929197cf76539f02984fbb46b523fa779e8de5c084c0e32292f145d8e062d52c172572c321139784b1f4304b75276ed3ae1f03fbfdc90b56476a774c5254a41b1e50454a50d2c051637fe7eab7eeacf7caadca94f6332add1eb17a8b894e07c331a8e5ef411b6c525b84db502659d0d95afd854a4a1c7a42d2a1bd5179636bcc9c89dab2139465d82acbd562b8ff2b3dc449f32a9fed1b33c0468c38b29645abfb322249beebd842605a453dced5be7ac7fbf39d226ddbf3806236942de61b5bee638b581e2ba1c406b8b393d5dfcfd241f808eaeb29d824e724010888bb03c94abe6e8a019c1e892fdf3912418300928b7c87343383e41d656200e5c04f57ea03a760a716e35d67ba0fd160f3b7c3cf0e5de1fac7936c7303d9e235856d1dac018de7c302598a560f6275d95a8f5191b7f265ea343a5320aea133fc627c0f39f1504c312b05c371379717c02a74168367cd71b6c6be13bc0bfa2133bdf222fd8f6477269451be36f0be993b3ef8b5de9d22997b06c7686dad93fd858b1f7588b37194005074e1f3e01529aeb6726aea2a9bd3c62fd760f2e28f0b20862b14dd332ad1fcd3492ae1bd5606560649e20687043993029cca593ffc164b6009c442e57aaf13b844a83a320a4db18ea03f52f0c0118d3130a"}) r9 = syz_open_dev$vcsn(&(0x7f0000000180), 0x10000, 0x620001) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000580)={'ip6gretap0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000004c940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {0x0, r11}], 0x6, "123cbb5072d695"}) [ 2638.511341] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2638.569706] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:10:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r3}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)=ANY=[]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$usbmon(&(0x7f0000000140), 0x6, 0x185643) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4}, './file0/../file0\x00'}) poll(&(0x7f0000000180)=[{r7}], 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x9, @none, 0x81, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) 00:10:15 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$int_out(r8, 0x2, &(0x7f00000001c0)) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000240)=0x400, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:10:15 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x10000000000, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/1117], 0x98}}, 0x0) close_range(r1, r0, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0xffffffff, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0xfffffffffffffcdc, 0x1e, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000480), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000640)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3a4a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438d080e8e214a050893fd3fa27a56032a79c1d099b5108ecb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d3cb6ad16918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe20900c55d23902439133eecfafb2e0f", 0xd4, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) 00:10:15 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:10:15 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) r8 = clone3(&(0x7f0000000400)={0x8000000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), {0x19}, &(0x7f0000000240)=""/97, 0x61, &(0x7f0000000300)=""/163, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r5}}, 0x58) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x4}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r3, r9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2638.791683] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.5'. 00:10:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/12, @ANYBLOB="ff9d23b4c39731527e0042108d25000052"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000004cc80)={{0x0, 0x2, 0xfffffffffffffff9, 0x6d, 0xa6, 0x0, 0x4e4, 0xe49f, 0x4, 0x7fffffff, 0x5, 0x2, 0xe6b, 0x0, 0x20}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004dc80)) lseek(r1, 0x0, 0x2) lseek(r0, 0x14, 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r11, 0x0, r1, 0x0, 0x200f5ef, 0x0) 00:10:15 executing program 6: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000024000100ffff7d8dc47ce9e8a6450000"], 0x1c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 2638.886059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2656.086152] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2656.108861] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:10:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x15) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000200)) r5 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000200)) sendfile(r2, r0, 0x0, 0x1) 00:10:32 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)={[{@fat=@fmask}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2f, 0x200, 0x70bd25, 0x25dfdbfc, {0x1c}, [@nested={0x18, 0x1e, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r2}, @typed={0x4, 0x78}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000) syz_open_dev$vcsa(&(0x7f0000000140), 0x3, 0x101000) 00:10:32 executing program 6: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x98482, 0x12c, 0x8}, 0x18) pread64(r0, &(0x7f0000000180)=""/98, 0x62, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) lseek(r2, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r2, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 00:10:32 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000540)={r1, 0x5a, 0x33}, &(0x7f0000000880)=ANY=[@ANYBLOB="656e633d72617720686173683d736861333d5b014f8b6993c09f331c342d67656e65726963000000000000000000000000ffeb0000000035e44fa2177cf8a4a4000000000000000001000000000000000000000000a51f3255fb02f651f6e6bb3138c353f9cd0c3318292047b0fe34b9867593a7ca82316f85b4d6f6fb86e6fba2960ce330a0d719cf2fc04be6faeba7d7bd7ec9cd70ea3b4a768b0dbf6a5ed1a4dd89471cc72381dc95496d825f47c23060c370965a3e08679a721d31b67d0677a3506851b379d32f3bad86e1c1349e833f099da19b4147fd8aebfa666b9383309ec9af7bcd947f379efc4001fdf867c9d6e96cc125"], &(0x7f00000006c0)="8776720a424a69c0842e27052ba6367a4932e9ff18ddf5884e6ad2b39c74a2dee15f1cf90b247542ca56f774635e6a5c2d352721938a93622529065d8da82a5ac8c8ba5669b50d150c28f5a033da735b1cb6af4d67ccd87bf4f8", &(0x7f0000000600)=""/51) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, r2, 0x1) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:10:32 executing program 7: r0 = syz_io_uring_setup(0x259b, &(0x7f0000000300)={0x0, 0x0, 0x8, 0xffffffff}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffd) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd=r3, 0x0, 0x0, 0x0, 0x6}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0xfffffffd) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000200)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4004, @fd, 0x8, &(0x7f0000000240)=""/98, 0x62, 0x16, 0x1, {0x0, r8}}, 0xa105) io_uring_enter(0xffffffffffffffff, 0xea9, 0x2000, 0x1, 0x0, 0x0) 00:10:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:10:32 executing program 0: r0 = syz_io_uring_setup(0x3875, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x259f, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = epoll_create1(0x0) dup3(0xffffffffffffffff, r8, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r10, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:32 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:10:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:10:32 executing program 2: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb', 0x200c0, 0x8) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r3, 0x0, 0xf, 0x0, &(0x7f0000000200)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000120031cd00000000000001000a000000090000005ef6a6516b012000"], 0x20}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(r4, 0x9) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="b01200003200000429bd7000fddbdf251f00000008008e00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"/4180, @ANYRES32=r7, @ANYBLOB="0c002e00ffff0000000000000400550027e5a60f22423c2828db17e980aec02cbf48946a749e96322c2e3472d7f5582a61d74a5f2da6d047075b10adeb310bbcad630a8efef2ea31545c7aa054cbec96165da9ec35b296ae784665f70204c1cc928cdd3a98e81b6702869162008ace1f92c22a5ab0bc32bdc1f8a05dd1270a468b9b644da6f4cdfe268bc729ce64c67a15e0df1175923706008b002c0000000b3b642d25d905ff77c39083d0190ded1d40569d41ab29923ce33b0a1f8c9329a48bddf806f4f7a176bf9be648995581f9a24bd0fd9b1c8d470187bee9d8dc5dca59cd14dd9b63a84420b2c4e708006d006a000000080080000600000024006b800c006d00ba0000000000000014000600fc0000000000000000000000000000010c001200a2fac85a00000000"], 0x12b0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {r6, 0xffffffffffffffff}}, './file0\x00'}) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 00:10:32 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xeb2a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="f2a11dcb5e33f201f8e7069fcbc812f0eefee162c7e686f9f875f70eaa6a502d0e84b36e7d27d716cd238360e0a7a38c18fa8fee27d4667e3703e80aa4091237894bf4a51c512fb9bc871a040aa9f15bbd366e826669a0b41da95349a5bf9a06bbeb5e60263de15b53a1a1bf752051bec216a16300fd0c686b30f2a0e05754cc39fd89c53bf4f68c6a4eb0ec42462594460a334838f12ffa7e6939f75a6ee78f4d34d6ca33acd90235be259e923e6b1fca7885acc46f4cbfcf0d524f95d652b05c6bcacf45e2133bc6bbc14f3870ce9f2fe4e5c8bf65a675ec7317904f856ef80deefd120ac52c4efc9666a39a46af47e4e53201871e", 0xf6}, {&(0x7f0000000400)="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", 0xfe}], 0x2, 0x0, 0x0, 0x10}, 0x4000811) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2656.328687] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:10:33 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:10:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) [ 2656.404863] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:10:33 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r6, 0xffffffffffffffff) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4000, @fd, 0x4, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x200) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000200)) r3 = dup2(0xffffffffffffffff, r2) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@private0}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002300000826bd7000fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000101}, 0x80) 00:10:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2656.625009] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:10:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x240400d4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000013fff28f834d44842500f00", @ANYRES16=r5, @ANYBLOB="010000000000000000001b0000000400cc0008009a00000000000800010065000000"], 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100"], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:10:33 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x1fc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = epoll_create1(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xc2a7e3501212764b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) dup3(0xffffffffffffffff, r1, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x400, &(0x7f0000000300)=""/238, 0xee, 0x0, 0x1}, 0x80000001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x180c0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000180)='./file0\x00', 0xa000, 0x11) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x31) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:33 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000002540), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x26f397f75b2ac001, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "8a93c5c4b83142b1f395321d8f9831e7"}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d40)={0x1150, 0x34, 0x300, 0x70bd2d, 0x25dfdbfe, {0x20}, [@typed={0x8, 0x91, 0x0, 0x0, @u32=0x6}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0x55a4934}, @nested={0xbe, 0x22, 0x0, 0x1, [@generic="fd606675c14c08e83aa8c2be79cbe49ec34e03f3b23d199b210fc15ebd0fab8d2f84aed288db17a92814534b3c542aaf0cd374d5ef1b83621269c3e68417ac7a4c231c0d9e5e602ec5f23212f6dcf3765c65ce74d8acf84a32c2646dd5fbc6242b5a38f6390d63d88ef676540e4245657035b6812d67468f935c72dedab5bd086c9a53a08eec7dccf54bb7237727b87ed8d305cac08c6bf3d8a8b0e354190d71457d4c68e722bd545472e8471279493a83fb7a7eba89d11ea95b"]}, @nested={0x54, 0x4a, 0x0, 0x1, [@generic="5b54f69b988841b496eb41d3da69a1de2e8b3bfeba58d2d1ff3e624a78c2d9b3a3e029bbf703c61569f0e10290091eb7c924bbe1c5cbbc13ae06a32d939ee34c90fee970c699e5cdefe5158a4cd8db82"]}, @generic="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", @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@remote}]}, 0x1150}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b00)=0x0, &(0x7f0000000ac0)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)=""/4, 0x4}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000580)=""/81, 0x51}], 0x5, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x178}}], 0x2, 0xbbc1d09ead31029b, &(0x7f00000008c0)={r8, r9+10000000}) sendmsg$nl_generic(r7, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x16, 0x100, 0x70bd2d, 0x25dfdbfc, {0xf}, [@typed={0x8, 0x36, 0x0, 0x0, @pid}, @typed={0x8, 0x3d, 0x0, 0x0, @fd=r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000814) 00:10:33 executing program 7: r0 = syz_io_uring_setup(0x73d0, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x585e, 0x1887, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r9, 0x0, 0xf, 0x0, &(0x7f0000000200)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x1f, 0x1, 0x0, {0x0, 0x0, r9}}, 0x1) 00:10:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 00:10:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) [ 2656.821524] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 [ 2656.839648] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 00:10:33 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x42, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 00:10:33 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) r8 = dup(r7) io_uring_enter(r8, 0x7811, 0x49d6, 0x3, &(0x7f0000000000)={[0x4]}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:33 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000140)={0x20001000}) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:10:33 executing program 2: clock_nanosleep(0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x2, &(0x7f0000000000)) [ 2662.385033] kauditd_printk_skb: 9 callbacks suppressed [ 2662.385049] audit: type=1107 audit(2000000005.409:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { stop } for auid=n/a uid=0 gid=0 path="/lib/systemd/system/rsyslog.service" cmdline="" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=service permissive=1 [ 2662.385049] exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' 03:33:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendfile(r2, r0, 0x0, 0x4000007ffffffc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @loopback}, 0x100, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)='veth0_to_batadv\x00', 0x7, 0xfff, 0x1000}) 03:33:37 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8020, 0x7, 0x6428, 0x0, 0x0, 0x4e7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x120) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xde, &(0x7f0000000080)=""/222}, &(0x7f00000001c0)="9e203b930b00", 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000240)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0xff, 0xb91, 0x0, 0xfffffffffffffffe}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x9, 0x4, 0x6, 0x0, 0x0, 0x4, 0x18000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x400, 0xc12}, 0x0, 0x800, 0x1, 0x9, 0x80000001, 0x401, 0x2844, 0x0, 0x10001, 0x0, 0x2}, r0, 0xd, r1, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffff4b27}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x23c, 0x18, 0x300, 0x70bd25, 0x25dfdbff, {}, [@nested={0xa4, 0x25, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @pid}, @generic="6c7df17c180e7583c1ee20eb43229d4a719ae7e077eff629cf1eb23cefeabbf6a16cb6f421236f37bc8e8df61c37c6d65bdaf6eeaabb3da38c033d9aa89f87a69212d8de5d95723e11f70e7ee35680c275ada97aad7bf2a6a85c795e05367292767cf70506fa7ce17c50b9cdeb6e14708e4c25aa800b2ba9f228f4ccacdf4bc554b74574fbba34890f41d70cefe192331eb0899dd595f503"]}, @nested={0x182, 0x52, 0x0, 0x1, [@generic="151526e70b34fb171732d8c3e3638b0fa2dbfac2577ddc237a60fb1e4b93ad9249f8a3f4c4f1e3b05bc808e9ccbc45dc8cc1dca19777e93a2935801aed66d0c8373519026accf12e5a3c1acc232fcaacccf8e59bb94cf4250037061b92", @generic="551d0f5d68a4456cbd80cfabd6088f9d87cd0034a1cebb1fdb3fc64ff0537b48b9c1f9cee607ed1ea4676587661cc3e6819450f42453256b0aaf1041ba05dbf0f08faa1dbe8713cd390756d2b0a8653cec7bfb803b988c3798e2ed5344cacec670fc8f75b8c48d8a74bc1de5d4553919885e07e543eb414ee8da4a049c307694206220fe1fa23ff55cc879fe4b5b4fa05e72b31038654d858764556971537e44d2b42db5a4309f0a4e717440920cf5283da8d45208ac45b0b83877ab8292add80d9894d3099315b2a1294113442f37a0f4784b66de2f0d5b25ab40c66b", @typed={0x8, 0x61, 0x0, 0x0, @fd=r0}, @typed={0x1d, 0x40, 0x0, 0x0, @str='trusted.overlay.redirect\x00'}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000080) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000480)='./file0\x00', 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000200)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x20082, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f0000000a00)=0x3, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clone3(&(0x7f0000000940)={0x1040400, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0xb}, &(0x7f00000007c0)=""/128, 0x80, &(0x7f0000000840)=""/132, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x4, {r4}}, 0x58) 03:33:37 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0xff, 0x0, 0x1, 0x4, 0x1, {0x0, r8}}, 0x7) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x5) 03:33:37 executing program 6: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') setns(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x2, 0x8}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x5c33, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r7, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000180)={0xfffffffffffffffa, 0x30, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = dup3(r1, r0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) ftruncate(r1, 0x0) r9 = getpgrp(0x0) pidfd_open(r9, 0x0) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="080300003700000225bd7000ffdbdf250a00000004008f007dbf97dc12a7d74aba4311fecdc1aeec536fe5a2008d801e5df9c95d16ec269a91ee2e7f5039e15b9fa2234a09c5e543ad985fdb58d428a11b1c96fcde8edb9d15b2f1dbf98034cf47fb007140c03fbfd3e646395814a9bd57b1b83249f3be38567965689d20292a24bd907a8513ea4c2f88166aa59e0f7826b4d1c90f8ef3359e8b43743d9ba41d08a43fbff56efa6feec93bf47d968106d53dca6de70400000000000000f50880e028", @ANYRES32=r9, @ANYBLOB="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"], 0x308}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet(0x2, 0x80000, 0x7ff) 03:33:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 03:33:37 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:33:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="010000000000adedb4a166696c653000636beb05c456a596ca6863e4618afdda58c55ce7fdcfb75cada3020971ba15eea421f6adc1110c77dbcb68325663004919d0738854e0b4e30e39c81ae6a7068410f8a2914c3936cb9165fc4a8f76cd3663300032fa17843d65296694e7bd7abcd2a587ec43fab20ff915a67a74bd34"]) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffa}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc000000130001"], 0xfc}}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}], 0x1, 0x0, 0xe76) 03:33:37 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20000, 0x24) syz_io_uring_setup(0x4699, &(0x7f0000000340)={0x0, 0x6ccb, 0x1, 0x2, 0x262, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x400}, 0x1}, 0xffffffff) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) r5 = epoll_create1(0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2674.467748] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2674.630885] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 03:33:37 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x30, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r9, &(0x7f00000001c0)={0x1f, 0x2, 0x4}, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2674.671975] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 03:33:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140036e01d00210c00000000fbdbdf2501737d5151b8f5147533fed20d56f676c5eff0fa65570f5289f4af67416d74341ca6e976f9d5ea9bb616880e0d36b576677575dee7b990e25cb4e45cfaf0bd6a0878e4bdace36b7140ad66befa404e"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) io_uring_enter(r3, 0x662e, 0x1e62, 0x3, &(0x7f0000000480), 0x8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xcf67}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x7, 0xf7, 0xe8, 0x8, 0x0, 0x1, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x18, 0x1, 0x9904, 0x9, 0x538, 0x0, 0x1, 0x0, 0x8001, 0x0, 0x3}, r6, 0x4, r7, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00', 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) r8 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000340)={0x0, @sco, @generic={0x1f, "df0462408bab10f0b5ed61473f95"}, @rc={0x1f, @any, 0x7}, 0x7, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x1, 0x3}) 03:33:37 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc0200, 0x22, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8043}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:33:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$inet(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r2, r0, 0x0, 0x4000007ffffffc) 03:33:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 03:33:54 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x684e, 0x0, 0x20, 0x4003}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x1f24, &(0x7f0000000240)={0x0, 0x56a7, 0x1, 0x3, 0x24d, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = epoll_create1(0x0) dup3(0xffffffffffffffff, r5, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)="9f1f70a7c22d44304a4298ab342449a83226c2ada12fa014e1f9dc50dfef704439b1e23ccdf063f86e292094321c97c41659c22e1a8a282da470dd811ae6b25171b2fbd900ca2ae70e071fb00f8a904d8ff38d3fdfddece9dce752", 0x5b}, {&(0x7f0000000300)="71608eb20c61edfc5eab843f9703c356207e88e2fa993234228e053050c54d97af1d7843047135f4686e00effd35326fc04c08fe6f32da604b244b16613edc0a2ec52dffbaf0fb85a604a8310da612ff911af184291fbe7cb168d7a1ed91cfada5a98d13b07b916dd6d279ba1cb54ab40125ff5bd74225e00e89127f55c82ba6910e738629c668b55ca235f0d6c83058c449baba8d875d0fb7d3ae12a5", 0x9d}], 0x2, 0x101, 0x715, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2183, 0xfffffffe, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000500)) 03:33:54 executing program 2: perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x9, 0x0, 0x9, 0x3, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00) r0 = syz_io_uring_setup(0x2a75, &(0x7f0000000080)={0x0, 0xb39e, 0x0, 0x0, 0x184}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x9333, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x2000000) keyctl$chown(0x4, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0x3, 0x1000, &(0x7f0000001a80)=[{&(0x7f0000001b40)="7a5cb5dbef1d73c9fd3ee00951cae16b07787ec4dd51a5003751dbb6245cb062557873fe23851847161ef860d4c7d4a5da44ca358eed1a409a3d395d0f41b764fe5826bd7dc1b76dcd5fae29", 0x4c}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="f4dd87b18ddbb47c9c56a514f872e684740c72a911a8cdf5ffc88e53a11faf034edd39035f3d478a85120946023a2311387657c115273108b5f43439145b03ead756274375a95c6a30d68ec311f1337396e16e3538ef27ad2ec517d53772177ca3c4298ce9646718f773b9137224fb4f01577e2f23857459c9890898cca28a4e81f46f228b31f8f4b94ea80a06376b4a4460755b6a57ccae0abf48bbbe5c7e78d65982df484f9b36", 0xa8}, {&(0x7f00000015c0)="56c36b1b60787682dba6a8050707b83f9b8bd8b7c24735e4592cab007bd99ec3c1c365a9a03485aacc437887f28974f7c5aed8218aea9b56916368f6072ebb705d7398c8de83881b44bff81439154c21203be922031bbf2ad29645fcf44dfd2f0bb1a8ad3dc4fdc2fa1291db79628df848befb48481874ccd4f4df35782b25dc286578887d81b1", 0x87}, {&(0x7f0000001680)="4c974edc896d672f925798240ff6af0c2c579868db082fbac62368ff4c3a2480f3733baa8dbe3e3f0b2527d09319", 0x2e}, {&(0x7f00000016c0)="fe7ac2900e4552aa82bb498cb4316f49e8184f2cd90afbee621403d50c82a4911651c0186219b0966f2f52e566f025967a9b559821ca45f2457275f76d027ba3792f656c1ad718cbd64edd63c702a220e938546955afba6da9600d36b662edd25b61c944104e0d4c3940cc17d6e20b6b71985c19e12ce2fd", 0x78}, {&(0x7f0000001840)="e574d6b34ca90458c8b6fa9330510989a0e96f968f1500de33744ce1f6292b286da3f4abce9d5f862b639535f8c5ad7da88743c6fec6f7ed699307803370d2e24cec21f64ef3ee71a7e64c87c14eb8faa764939a302fa34c00df6694b4de6a5abbbe290de03643b588845f6feaa28cd4f23e19e3346f10dcccd7d65d266f184587fec700346f0f914fa1b7b1268f9a33423c2aaed76dfe4250e4b06401aed0998290146eb6d46d2b59", 0xa9}, {&(0x7f0000001900)="1e009b8b5a9621a9d59acb45f5527774b38046857a29db998101aa72e45c33bc7865dc53e32da6f1a351a8f57c4251492f48791307f0b1670939e1ab0e7dc8d3b5bdaab78b", 0x45}, {&(0x7f0000001980)="622c24ebd1ddddf0979bba353b39621304602ae70523e8644e4867b11e41df2e80fbb4c3a084755611a827630b8032be32c513c7668937b7fc56a1a1aa484a9db1d5a517c5c7ef6dedba0ce26101b4efc679a096b02a576d2ad4a4578d182f9a7d407c63686c9525a84c39535138c8fc91385d5ebd5e53ff5d9261f375ff7d2122194b8fd6a8bf4991edbe4cfec5d45ee028bc0e0cd7887f0a63331608811059dbaed29d8a975fb2f96ea80f0017310ae44f98241e794929ed7e2f819c7abe600505b1f798c1a26e9cb625aa8109a34d006e02a64d240c3d981c8093bf9eaacf0dbcab3731239c", 0xe7}], 0x9, 0x9, 0x1, {0x3}}, 0x80000001) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x4, 0x800, 0x12345}, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x121}, 0x1}, 0x80000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x5, 0x3, 0xffffffff, &(0x7f0000001740)={0xffffffffffffffff}) ioctl$sock_bt_hci(r6, 0x400448e4, &(0x7f0000001780)="b80f52f302299a02964824e7e9a8869b13c0a27d1d35a442fe56d664bd39bca282e3993b342d5d5bd85bb65a64e8619373feef86e94d3c098bafa3ff06b5a60f1d0aa8ad2affbe82635d7ba96213f80a57292938d3ee8e094d2234a9329c172012e51ed42403354a26fd9347651c52dd853753433d73cb7d5a035667d00fa6a6a63b2ff30e8e61ac980324e98443707d7bc4245fb23ca011486bc3644e95ebf9106a00d13fc5766734f4b6298f8d6fc11e7504cefb3009fed973c83a92207b") io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:33:54 executing program 4: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) epoll_create1(0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, r3) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:33:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x105142, 0x82) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="2a049eea3afa3832b51bda870636bc8f22e41f78e69ec417ebc804e533f88d81a346b061c7cdfa7d60272793d14479e25e744ddb3d285c33de6230def2ce75ec865911ee8fdf5d5161a5bcb215d2de1b7a9a4ba494a8ff3b1b7091c9e68e836d8be2b4254b1825221bcb6f92c91b90dd6d3f665b894cb7885483c3f284b1520d3c8b680446efb4cbe8", 0x89, 0x3, 0x0, 0x1, r4}]) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={r8, 0x1, 0x6, @multicast}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 03:33:54 executing program 7: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r8, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0xd046, 0x0, 0x0, 0x0) 03:33:54 executing program 6: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TCSBRKP(r0, 0x5425, 0x2e8c) ioctl$KDMKTONE(r0, 0x4b30, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1ff, r0, &(0x7f0000000000)="863a939766cc01d46f7940b4236cb2319c3f35e66ebd1898e079d824fcc7ac7c795e2033d628bcac44116f8b264b00815c764b353a17ef6bea41dadc7e5add377b62c21a3cf55dd30281887f0102e778e8a34fb1c5c75b756583d862826b6ec5da12797ab15462efb5be703138b5f16c3cc52e48ff496f80539267a4a2df9f74a03ca0bc14ade2050fd6ec69ec6cf0b4e1d6e5e6df8eced04420b6ab0397303baa975ad35918f07cfffc547b3aeb49d0eb525d6dd7c30e7df102046b05b6c4cf318f83a6dd4dddd43212b1592f0238f971b76b530392507739", 0xd9, 0x7, 0x0, 0x3, r1}, &(0x7f0000000180)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x400) ioctl$KDDISABIO(r2, 0x4b37) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000001c0)={0x1, 0x3f}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x6181, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000240)={0x5, 0x3, 0x5}) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x6b, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000002c0)) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000300)=0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESOCT=r4, @ANYRES32=r4, @ANYRES64]) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x2c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x44040, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x6db, 0x6, 0x6c0, 0x8, 0x9}) r7 = syz_open_pts(r6, 0x200000) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000400)={0x1ff, 0x6, 0x200, 0x8, 0x15, "92607b8934482736"}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000440)) [ 2691.402736] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 03:33:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000140)={[{@utf8}, {@shortname_lower}]}) r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) capset(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x4, 0x2, 0x7f, 0xac, 0x0, 0x7, 0x400, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x2010, 0x0, 0x10001, 0x2, 0xc1b, 0x1, 0x8000, 0x0, 0xfffff801, 0x0, 0x3d8}, r0, 0x5, 0xffffffffffffffff, 0x8) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x8a0030, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0xa6, 0x0, 0xc4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f, 0x5, 0x9, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) [ 2691.583869] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 56985 03:33:54 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff00000001}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0xc0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x410481, 0x62) 03:33:54 executing program 7: r0 = syz_io_uring_setup(0x259e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = epoll_create1(0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd=r0, 0x7, &(0x7f0000002540)=[{&(0x7f00000023c0)="3d717cf8eeb3d1316d7b557cacf52e5830d9a86a05ed11001dcc68fd5a496f98c25a44416570947be9a2b9b1bd5cf00dc606c73b01adce877b0482826e78f369be28b0588f65877b20a82fe5a5b29a47d1bbc18b40616fdb81dbd401d8394a961aace48048096ba8dee5c139180a4427afcc4b52d61c17684889557cd6fba7946d4ce9ebec5c6698cee65fbbded4e71c2240146994c56914b69d50fd7ead8513b98d0cda24815fb8cd43827fd54a63589f4c64c4a57574b139d72ac3ab", 0xbd}, {&(0x7f0000002480)="1f9fc3b1662b1a375b8fdd971893f47f340d7b20517c97504fedb7c1d67271cdae0e6f764837e5287c630937da22ec7d2bfeeb3b50fa76e3c9a356aade0acc98a7c8ac86b0840bed65b492df4e364f0c206657aef39b46c2bc808d8c41821be3ef57c34dfaf467a3a1662bce37172458bded431dc27592b1b8bad479ff8c08aac3cebd319aa8204666b0b7a49b9c5944ef38", 0x92}], 0x2, 0x10, 0x2, {0x3}}, 0x80000001) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index, 0x0, 0x6, 0xffffffff, 0x4, 0x0, {0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r7, r3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_int(r8, 0x0, 0xf, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000300)={{r7}, "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"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2691.748849] tmpfs: Bad value for 'mode' [ 2691.778141] tmpfs: Bad value for 'mode' 03:33:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3737373138343737300000000000000000000000000000000000000000000000000000000000003ce51d14f346aacb6c1b2273821199de", 0xd0, 0x400}], 0x0, &(0x7f0000012c00)) 03:33:54 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) 03:33:54 executing program 0: r0 = syz_io_uring_setup(0x259f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3d}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = epoll_create1(0x0) dup3(0xffffffffffffffff, r3, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r5, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2715.319427] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2715.321595] CPU: 0 PID: 258 Comm: syz-fuzzer Not tainted 5.10.233 #1 [ 2715.322402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2715.323407] Call Trace: [ 2715.323765] dump_stack+0x107/0x167 [ 2715.324257] dump_header+0x106/0x655 [ 2715.324762] oom_kill_process.cold+0x10/0x15 [ 2715.325355] out_of_memory+0x1149/0x1440 [ 2715.325900] ? oom_killer_disable+0x280/0x280 [ 2715.326530] ? mutex_trylock+0x237/0x2b0 [ 2715.327063] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 2715.327845] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 2715.328628] ? lock_acquire+0x167/0x470 [ 2715.329157] ? warn_alloc+0x190/0x190 [ 2715.329659] __alloc_pages_nodemask+0x51d/0x600 [ 2715.330300] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2715.331107] ? find_get_entry+0x2c8/0x740 [ 2715.331659] alloc_pages_current+0x187/0x280 [ 2715.332214] __page_cache_alloc+0x2d2/0x360 [ 2715.332765] pagecache_get_page+0x2c7/0xc80 [ 2715.333302] filemap_fault+0x177d/0x2210 [ 2715.333817] ? read_cache_page_gfp+0x30/0x30 [ 2715.334405] ? replace_page_cache_page+0x1200/0x1200 [ 2715.335090] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2715.335775] ext4_filemap_fault+0x87/0xc0 [ 2715.336341] __do_fault+0x113/0x410 [ 2715.336837] handle_mm_fault+0x1e53/0x3500 [ 2715.337411] ? ep_read_events_proc+0x3d0/0x3d0 [ 2715.338024] ? __pmd_alloc+0x5e0/0x5e0 [ 2715.338568] ? vmacache_find+0x55/0x2a0 [ 2715.339099] ? vmacache_update+0xce/0x140 [ 2715.339666] do_user_addr_fault+0x56e/0xc60 [ 2715.340258] exc_page_fault+0xa2/0x1a0 [ 2715.340759] ? asm_exc_page_fault+0x8/0x30 [ 2715.341294] asm_exc_page_fault+0x1e/0x30 [ 2715.341820] RIP: 0033:0x4666e0 [ 2715.342263] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 2715.343121] RSP: 002b:000000c0000bf7f0 EFLAGS: 00010246 [ 2715.343816] RAX: 0000000000000000 RBX: 00000000000003e7 RCX: 00000000004666e0 [ 2715.344657] RDX: 0000000000000080 RSI: 000000c0000bf840 RDI: 0000000000000003 [ 2715.345497] RBP: 000000c0000bfe40 R08: 0000000000000000 R09: 0000000000000000 [ 2715.346359] R10: 00000000000003e7 R11: 0000000000000246 R12: 0000000000000003 [ 2715.347192] R13: 000000c000082a80 R14: 000000c00008a180 R15: ffffffffffffffff [ 2715.348135] Mem-Info: [ 2715.348477] active_anon:20719 inactive_anon:59345 isolated_anon:0 [ 2715.348477] active_file:1 inactive_file:2 isolated_file:0 [ 2715.348477] unevictable:4 dirty:0 writeback:0 [ 2715.348477] slab_reclaimable:9789 slab_unreclaimable:233012 [ 2715.348477] mapped:69634 shmem:145 pagetables:2376 bounce:0 [ 2715.348477] free:3242 free_pcp:44 free_cma:0 [ 2715.352147] Node 0 active_anon:82876kB inactive_anon:237380kB active_file:4kB inactive_file:8kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:580kB writeback_tmp:0kB kernel_stack:5120kB all_unreclaimable? yes [ 2715.354860] Node 0 DMA free:6476kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2715.357911] lowmem_reserve[]: 0 1616 1616 1616 [ 2715.358513] Node 0 DMA32 free:6492kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:82876kB inactive_anon:237380kB active_file:4kB inactive_file:8kB unevictable:16kB writepending:0kB present:2080640kB managed:1660456kB mlocked:16kB pagetables:9504kB bounce:0kB free_pcp:176kB local_pcp:176kB free_cma:0kB [ 2715.361889] lowmem_reserve[]: 0 0 0 0 [ 2715.362397] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6468kB [ 2715.364035] Node 0 DMA32: 1069*4kB (UME) 166*8kB (UM) 53*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6452kB [ 2715.365625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2715.366703] 148 total pagecache pages [ 2715.367147] 0 pages in swap cache [ 2715.367582] Swap cache stats: add 0, delete 0, find 0/0 [ 2715.368196] Free swap = 0kB [ 2715.368583] Total swap = 0kB [ 2715.368936] 524158 pages RAM [ 2715.369295] 0 pages HighMem/MovableOnly [ 2715.369777] 105067 pages reserved [ 2715.370241] Unreclaimable slab info: [ 2715.371070] Name Used Total [ 2715.371790] pid_3 7KB 7KB [ 2715.372443] pid_2 50KB 82KB [ 2715.373063] IEEE-802.15.4-MAC 63KB 63KB [ 2715.373712] IEEE-802.15.4-RAW 63KB 63KB [ 2715.374347] p9_req_t 8KB 8KB [ 2715.374989] ip6-frags 15KB 15KB [ 2715.375642] fib6_nodes 28KB 28KB [ 2715.376265] ip6_dst_cache 45KB 45KB [ 2715.376933] PINGv6 63KB 63KB [ 2715.377587] RAWv6 304KB 315KB [ 2715.378217] UDPLITEv6 155KB 155KB [ 2715.378863] UDPv6 62KB 62KB [ 2715.379516] tw_sock_TCPv6 15KB 15KB [ 2715.380131] TCPv6 62KB 62KB [ 2715.380782] nf_conntrack 7KB 7KB [ 2715.381452] scsi_sense_cache 8KB 8KB [ 2715.382079] sd_ext_cdb 3KB 3KB [ 2715.382729] virtio_scsi_cmd 16KB 16KB [ 2715.383387] sgpool-128 59KB 59KB [ 2715.384003] sgpool-64 63KB 63KB [ 2715.384697] sgpool-32 144KB 204KB [ 2715.385323] sgpool-16 67KB 67KB [ 2715.385961] sgpool-8 11KB 30KB [ 2715.386628] io_kiocb 445KB 468KB [ 2715.387246] mqueue_inode_cache 62KB 62KB [ 2715.387901] nfs_commit_data 15KB 15KB [ 2715.388554] nfs_write_data 47KB 47KB [ 2715.389175] jbd2_inode 11KB 11KB [ 2715.389824] ext4_system_zone 7KB 7KB [ 2715.390489] ext4_io_end_vec 7KB 7KB [ 2715.391106] ext4_bio_post_read_ctx 15KB 15KB [ 2715.391817] kioctx 31KB 31KB [ 2715.392469] aio_kiocb 7KB 7KB [ 2715.393088] dio 15KB 15KB [ 2715.393733] bio-2 4KB 4KB [ 2715.394391] fasync_cache 7KB 7KB [ 2715.395007] pid_namespace 7KB 7KB [ 2715.395654] posix_timers_cache 15KB 15KB [ 2715.396291] rpc_buffers 31KB 31KB [ 2715.396945] rpc_tasks 3KB 3KB [ 2715.397595] UNIX 206KB 384KB [ 2715.398240] ip4-frags 7KB 7KB [ 2715.398894] UDP-Lite 63KB 63KB [ 2715.399542] tcp_bind_bucket 8KB 8KB [ 2715.400157] inet_peer_cache 8KB 8KB [ 2715.400805] xfrm_state 32KB 32KB [ 2715.401460] ip_fib_trie 12KB 12KB [ 2715.402088] ip_fib_alias 19KB 19KB [ 2715.402739] ip_dst_cache 28KB 56KB [ 2715.403366] PING 62KB 62KB [ 2715.404002] RAW 218KB 218KB [ 2715.404649] UDP 229KB 378KB [ 2715.405274] tw_sock_TCP 15KB 15KB [ 2715.406598] request_sock_TCP 15KB 15KB [ 2715.408210] TCP 60KB 60KB [ 2715.409097] hugetlbfs_inode_cache 30KB 30KB [ 2715.409809] bio-1 11KB 11KB [ 2715.410457] eventpoll_pwq 19KB 19KB [ 2715.411075] eventpoll_epi 55KB 55KB [ 2715.411715] inotify_inode_mark 101KB 101KB [ 2715.412354] request_queue 60KB 60KB [ 2715.412984] blkdev_ioc 37KB 37KB [ 2715.413640] bio-0 72KB 100KB [ 2715.414261] biovec-max 535KB 535KB [ 2715.414915] biovec-64 110KB 189KB [ 2715.415556] biovec-16 41KB 41KB [ 2715.416158] user_namespace 31KB 31KB [ 2715.416802] uid_cache 8KB 8KB [ 2715.417442] dmaengine-unmap-2 4KB 4KB [ 2715.418057] audit_buffer 7KB 7KB [ 2715.418706] skbuff_fclone_cache 82KB 82KB [ 2715.419335] skbuff_head_cache 1637KB 1638KB [ 2715.419958] file_lock_cache 59KB 59KB [ 2715.420609] file_lock_ctx 7KB 7KB [ 2715.421209] fsnotify_mark_connector 32KB 32KB [ 2715.421905] net_namespace 143KB 143KB [ 2715.422563] task_delay_info 123KB 123KB [ 2715.423163] taskstats 100KB 100KB [ 2715.423820] proc_dir_entry 523KB 547KB [ 2715.424453] pde_opener 35KB 35KB [ 2715.425078] seq_file 67KB 67KB [ 2715.425709] sigqueue 70KB 70KB [ 2715.426357] shmem_inode_cache 1248KB 1415KB [ 2715.426990] kernfs_iattrs_cache 243KB 243KB [ 2715.427667] kernfs_node_cache 6609KB 6659KB [ 2715.428275] mnt_cache 244KB 244KB [ 2715.428947] filp 548KB 1477KB [ 2715.429589] names_cache 463KB 654KB [ 2715.430225] hashtab_node 274KB 274KB [ 2715.430868] ebitmap_node 1149KB 1149KB [ 2715.431526] avtab_node 4976KB 4976KB [ 2715.432127] avc_node 35KB 35KB [ 2715.432788] lsm_inode_cache 3261KB 3364KB [ 2715.433423] lsm_file_cache 134KB 188KB [ 2715.434050] key_jar 47KB 47KB [ 2715.434686] uts_namespace 15KB 15KB [ 2715.435316] nsproxy 11KB 11KB [ 2715.436110] vm_area_struct 1114KB 1588KB [ 2715.436779] fs_cache 46KB 68KB [ 2715.437414] files_cache 266KB 286KB [ 2715.438062] signal_cache 339KB 494KB [ 2715.438701] sighand_cache 402KB 450KB [ 2715.439346] task_struct 1299KB 1837KB [ 2715.439978] cred_jar 108KB 208KB [ 2715.440661] anon_vma_chain 301KB 437KB [ 2715.441276] anon_vma 360KB 390KB [ 2715.441907] pid 58KB 75KB [ 2715.442568] Acpi-Operand 111KB 142KB [ 2715.443179] Acpi-ParseExt 27KB 27KB [ 2715.443817] Acpi-Parse 177KB 193KB [ 2715.444454] Acpi-State 118KB 133KB [ 2715.445055] Acpi-Namespace 24KB 24KB [ 2715.445692] numa_policy 7KB 7KB [ 2715.446317] trace_event_file 176KB 176KB [ 2715.446947] ftrace_event_field 280KB 280KB [ 2715.447588] pool_workqueue 48KB 48KB [ 2715.448189] task_group 16KB 16KB [ 2715.448827] mm_struct 353KB 441KB [ 2715.449471] vmap_area 228KB 283KB [ 2715.450088] page->ptl 261KB 346KB [ 2715.450735] kmemleak_scan_area 207KB 223KB [ 2715.451354] kmemleak_object 711500KB 711500KB [ 2715.451991] kmalloc-8k 4976KB 5248KB [ 2715.452655] kmalloc-4k 6840KB 8992KB [ 2715.453268] kmalloc-2k 5828KB 6368KB [ 2715.453910] kmalloc-1k 2836KB 3680KB [ 2715.454559] kmalloc-512 27329KB 27360KB [ 2715.455163] kmalloc-256 1439KB 1488KB [ 2715.455806] kmalloc-192 841KB 856KB [ 2715.456452] kmalloc-128 595KB 700KB [ 2715.457060] kmalloc-96 609KB 748KB [ 2715.457706] kmalloc-64 1372KB 1576KB [ 2715.458324] kmalloc-32 81876KB 81876KB [ 2715.458957] kmalloc-16 338KB 408KB [ 2715.459594] kmalloc-8 334KB 334KB [ 2715.460199] kmem_cache_node 47KB 47KB [ 2715.460840] kmem_cache 75KB 75KB [ 2715.461480] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=258,uid=0 [ 2715.464649] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1241364kB, anon-rss:280912kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:928kB oom_score_adj:0 [ 2717.117564] oom_reaper: reaped process 13746 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2717.504893] oom_reaper: reaped process 253 (syz-fuzzer), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB VM DIAGNOSIS: 00:11:34 Registers: info registers vcpu 0 RAX=1ffff1100154db07 RBX=ffff88800aa6d808 RCX=ffffffff8127fdc1 RDX=1ffffffff0a14eee RSI=0000000000000000 RDI=ffff88800aa6d838 RBP=ffff888010025000 RSP=ffff888016c8fd48 R8 =0000000000000001 R9 =0000000000000003 R10=ffffed1002d91f9d R11=0000000000000001 R12=dffffc0000000000 R13=ffff88800fea8160 R14=ffff8880083f8000 R15=ffff88800fea8160 RIP=ffffffff816f50f8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1f12c2f900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f12c0ab31 CR3=0000000009d8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff0000000000000000000000000000 XMM02=2f00646f6874656d5f74707972636e65 XMM03=5320444f4854454d5f54505952434e45 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=ff00ffffffffffffffffffffffffffff XMM08=20002020202020200020202020202020 XMM09=0000ffffffffffffffffffffffffffff XMM10=00002020202020200020202020202020 XMM11=9b49fd75b480bf531b87cfe1bd31b87c XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81301d30 RCX=1ffff1100938ff01 RDX=dffffc0000000000 RSI=ffff888049c7fef0 RDI=ffff888049c7f978 RBP=ffff888049c7f9f0 RSP=ffff888049c7f960 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff1100938ff1a R12=ffff888049c7fa20 R13=0000000000000000 R14=ffff88801b268000 R15=ffff88801c30c640 RIP=ffffffff811077b3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007faafa4df700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f12bece70 CR3=000000005018c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2030323a34333a33302038312079614d XMM01=6964206465766965636552203a5d3734 XMM02=6f63736964203a31313a383735343320 XMM03=7266207463656e6e6f63736964206465 XMM04=426b303a7373722d656c6966202c426b XMM05=2972657a7a75662d7a79732820333532 XMM06=3a7265706165725f6d6f6f205d333938 XMM07=656b2072656c6c616b7a79732030323a XMM08=30323a746e657365727020426b303a67 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000