000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='autogroup\x00') pread64(r5, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r5, @ANYRES16=r6, @ANYRES64]) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000240)="6fed03384297ec60c6d2c72a5453ea92bfee24dfc95d1ebcf0d4a5b32fbccb224028f95392ee6270b91d37af2095207ad35792a7b9cfcc78503686cb19cd5f0955ff00de841f822ba552034b01ca64bc5a5c17baf8b394fa2ca8e4c63b185b7b25df651bf4efdcab99e13cdc4f14d528fcb966b463bd18d17c20960fad3527204e99f242a1f7a107c75feeca59e24e109ef32066955af316", 0x98, 0x7f, 0x0, 0x3, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f0000000600)="f00beee20402bc2446cbc9b520f009a4a807fb1152b7f16adcc1f7b9da802982be19be54fa0ab8d94ea9e617b7409bc60c0c5fce9aba6801ef97a35ba2b3ba5c5918600b49202ff98538a9093556dc81e8719ababe49d48df42e5159a1587134ac306ce8e1c689310e25ee9cc440f82e05d95c4ab622078509b0e732d64de4c6ff4f6efa9ee7e54fa0cb592105114f17ebac9b77acd7ce0f7e66c82868d3259250467222fc09557dbc949e295aac2f2b4816baacfba19ddc84d5a4859874549a441df8e8d8145ae488f934c3da3af63c443ba3cde6d6fe629a82c42b5fcc29caf746ce5ca60a673b8db428165732bdd562ccc25eef757cbdc7f8a764ad2ba8202c2d282e28c14fe0a72060fdcae28d9b477dcab81af0f0c7c13cad954b92753942cfa2777d5bda3ca96096691bdbabce8da19ad264682a5d32b465b0bca1e8aa5020c7c58da542df03e62c38315d30afbecea5be52e296d10cbe2029581c9763a5fc5ba5ff0796b42d4647dde579a77a21bf5864d9d70a3f07e1757e9a6631b2e0e132b3c9c2b697c172e30ea998cb98758f3f08580154f328f0f31f1b2b2c29a8074bb5b6690fb91f86d4757b5358fdaa82bd2b21b0c69c97abb76895994853bcd6106a261c0baceed1173622fc5c6d1f00fd109eea35c99a8fb2ad8ceefa3cd83392b8eab54b734ed826a7c3d43677d83cc15e3cd1db9755acc4e15bcaf89ab47ea872e4ac7bedbb1fd008df9d69cdfb54e8a89898702e4d4a71fe49809bd45fb5a5afb6bc4ee88e745632996df1e3764989faae6dbddb71a635799d243147e5c69785dc133096c9735723864b50ed3411a29121cd6d6a5b5422a6541e1421bbacb0a9c00f06dc9dd674401a61c0406aa10ead5cf17272752400225e0efc6594e014536f91b159e9eef92dbf352c3dbf3fafcc6e31c3a62f64cd86c164f525b1d59b892888fbd92bd2fa2975f7ac149b42c10afe8af604e870df75ceec88052e166b9ff2aae1d4c186487ba88ec74d2c1820c68c2da2145cd503ed8306c35cbd8dfb9cf7843ad695f4b0b7bfdb06e6e874aa3e90b8c5cad916018e7be96686be4a5ebd67914f982bf3d51e8e8bf540b06e2aa4138288ffc35fa4697c3337aeeaf43cc0bdf37df827810d4b393fbde01002828b85b51fe96a539fb5ffc338e82a44a5300415a94b8f99bd8cac5bfa9414a72487fa59d0f88e71d7054f2f6b7d1b5c40cb5370ad158bbc52ec89e1ba5c9f8664cb99b1d7c8194a6bbfd28f9a03100c188c08372e1bd30c8e1bfe0adc89072eb378bb99eee40e4e9eb6cfa8e07c5e86053c72b010c68c5b9cffe4f214b3f35694ed6bbf5a07984cfc52450d5a5211f6e7c112953f244b304ec4ee7567aac5877b4476fde9e9b63704e3e1d940a82e5fcce98843c5648740e4ad864f9f38ebfd95539d4b7863c68913cce3eb05aeee342961a7a071e550ad8c7ce2d3e711087b76806e2d2de743e25b6bb8d6dfb117c1d851c11f2e76d0da96c765d9a156aee804dbabf2bd1788d92f993a347b9513a3bb6c41d1286dc290fa638a353a1124eca3e101dfacfef7547b1957a5f5ae12bd1a093376468c175f7ab7a2b9fd67d10405d963c39efb5ffcba9b6d25b6191144351b88e899663c6f7d052dc373104c9906c7fac6139fc208852c403052c14f9eb3908bec30b857667125011f96158e00182609e01a6c1baf02f11ef813d05fa4ff54fd729cf7dd0c8c16b3064ec4f31fa344b28408b5494b52add3ebdbfb8bd9daead52757d2d7b064c3190d17ffe7de2b3a1b4ce9f4c855c6a5117b74500e8787bedc9825a435c0b289c38f00a0f0af3e27ec9ea55a5530235a696ad91527741a682b4f02ef6d8c5d03f97f240cca3787657f63338b4bd4c819ce29365fe4aa85fb60e5c8520b3891ee75401a640abee14c25069b0184c31f754cf1bbf95c83a90a735177d8f2cd7309a54ce6a61d3d612e8cbb750aecbcc9f7eada67e85b0ec5c2cce1bbc67c6d48f3da2a05c61b94d0bbd0a7d204b9dc257cc865ac9e55f2c90bdca312a3397f9532873bc466697426aee95ce4bf2a2f6bc1546d9db171cecb6b97b7f5a6286d9b8cd2d854b256c4709906d43bb54248cb5ea64e0a5ed10cacac7ce0a0dbc1d76651b7af74e22a3e519684c40b65217666346cf98a7586ed1a9eea2c1376506555aa97252e68a6a274f37d36a0bdf03213f8971ee21197d87051bd2bc2f08aa4f511d0d1159e9ca3b891651539b926726f3fdd3a27536b962110a844c7bacb2f814f696e62215c7afe2246d8488fdb1f0574da7bee0898331f89ec97ebecaf104002493302c474d2041738a038bbba4d392bdf84fdfd67f58f224dba3246e482832fd18b3016d15fea70b589f8449fac06822756bf1969d601118df9149495b33fb0b10376d18af9d4cbeb89a20af7b599ecd77dead723837e5a2530e8fc1fa5e60e7b51d46fb677a72f2e36b254a2e30809b188f166f78cdff882a03a7725bf4ef922195f57f8d8d4a6738f8062e34603a7810970c481decedd82b57d63cc939b6853020e19759e13237e05982e26525673a3abf58e0da6f77165192e7eca7c48c7ffe6e3d6313a1d22d6c5e00b3bdc51c8fdabcda077768e8eb8bce810698b36884cf43a0f3197d13d5c9239901092d593cbddbe70a9e438dabb6c7c7e508ea9c903da1bdfb8d75b0c2791f1411dd26baa6c22492a388f3a2f673b8fa648185133ab0491c835ef5b0e8681467e1aad9c525807eb15c0565a4a567edc047c319b7cc342bacad74b22271829fb9958b4298ba16dfcd3543303471d626295d86bbe3e38be23071584b20a169a3ad4b8e89cd1e8e33a2f7d7b3a7410eafc2ec2ead7e333b74f0dfbc848b09f54a4f3544b3b165eceb8b449c2e3b14a8532b9e279798ae2466fda39a88db8396774a8933754f0d5f1b480e84109abda74acc19bc2de294cf85e4c527d3ffd46a0cf70c796dbef150a44b4e3dde7990377a0a1e2a22d0878728ef7dfc90c1353c4220986cfbfa282d76ac0fc4c36bc696f098af5653c6db8fa4665121dd7b6105c296cb0638740e7e6ecb3b829281837e9827be512e43b7b82c1e6cdf120a044a0f4b618b8572f6dd357fc5e56ff03534e3b11ae9cfc05c0ba29478fbe78a1229f0db82482a575f7b24b53fef7d50fbe0415aaaa98b672bfa33170a5594b3ce7551e1de311969ec336bb8bfda4a7ffc448e11f573b176d5d18f90b8f68eceffe092e9cdbc86dff39f3d1b9e4fcdad5a9b4e839a793fbed19d5a042ad1d8dce3bec8f2a6e7c655007cc1d925eb702b2e82263934d7a45cf41aa606af8907038e18dc94ea4a4cb90b23e5f56d83276c29e8018f52f158ffe0974613c8db7835a2983d984e8e549af12e93610d6aea68fc8d128ee9c223713a491f0e05f1070b4c2019e2fdc4cd8df19ae88530c0a8f3cd03edaf3e9f92a8726cbbc1deed64cffdd18f5bd5837dae1e74822395d5c7fd95d2cb15e414e40a424a7e2899330935c958cde4ca3842fc7e27e2ad22bc798340e9f1e5e47cd4ba9501391032a5a04fca1af46327d1543239509cd6a00e088b37877fb6636344442a254fef07a58b22e800ac6fcccf38e6f75482eba61eab2436dda0eabcd76453041f3bda9050623f3fea54e40eed01e9c5b16a8f476b165ab319d8167952dba9d0e2bd3321710c1194d22f71b7bea4c2db27cd9dee532048122debc8b397c87fe48014b5a1e20e2161642746d406b2beecdc128abfe7168cde05c3dbcfd61702cf581c36fb86466e0f63d79bb26f1120d045811d82169bb4b296ec339f1bb7524d877fbdbd14c08d5dda0afa18ac5e83f916b7f9ffad56f4f767eb9d86086405253764001026a6fd39d7f35382e01f0c37c8e68dfd5c9ecfdcb9e16d4b1e0f1e8c128e43df0027ea991370ccfc1ce0e328f3cc64a2c53723be6232b2c456251bea556ef9b5b2080cc536d2e141f8e64b215fa515d47795b057cbc1c7598c9f84e2a9e90bd78da8cd5e27b93322d72ec3ce28c47bba0da16e2f71450f8d9a442de408d874e4dc1ee4c0150ba64792ccb7ed4cab6d1d7bf0f86612e414e579258a946ac876946d121028a517a9754a67bc0f119bb2f56f8f68ccbfe7c1b003b5945c46d03d6c98c3fa3ba6f86ab3862b278f913142127bb164e035ad0c7366cc054b765c2096892a19dd8f2bc68ddbc4c276237cdd30d470ea656f695deb619c3f2b4f3a80d577d3099d25002a2beaa35523b8a8617b0a9f938a4c56ed25a661495546d6ec7f0457eaeff69cdf32189c00a974a7cf0477f3f4ee86b2bf6c9ec5535fd4c5ab42078525054dce184631f433907c7904cf8dbf9def904cb706260328859f883e48ddbd6f0925a08c0f9c890dbcd5471bc85110e9a7401d9daff781c3d5074907115a4d7b7923e46cd0e1cc8d7e70df7872ed67566c4fdb7f099bd6e6dd2d3bb31298aed8f91282b0e41e502cdf27466e853f9148fdd98fc470e99d7bcb4aec2c0367aebf431193f6aeb1fd8b45b6d6279882e3871413cd71cd9f300c1a3cc462c31e9d46470fa764cb1829a73d09143a83c6d13c47b947ef6e465ba9429ae91ecf4f05e24e9ca63d54ae20790b3dd9ea77ebf4b10f50f0d00042ed62bd4fffa3f7b168af0751d8195c36c7319ed66469030ab90a81dc2a3bfaf96ae988292254d3c4f551def980db5bbb22ce7a17deb548990c7c9cf0eb4410aa37297b048c992b667ae975d2f3df9715323af16c2d758ae7ad8a18fa92fb9a0ebb05204b19261bf03bb9fd281d09ba90eabab7a16bebcc588e0bddbbd6a8b2f60db6d2ed6a953a7afa3c8d3f211d67ffe6f8367233002ab848f694cae9ec3d73a332c6c8232dfc2dfcef70a71cb2abafbd6ba49fb6a639b4c5ce3088112190f2efd1841e2bbaf3b777b39c2fca15049a471d58b5a9e1deb416f3693b249cedf092ce12057fa8a7a5d709e15f52bd29d5f25acade4dde8e4eb7c292365e56411a328cbfdb6b36834be63057f7cbb4563b6a7cf3ee92021fb92648d4a45e5b80184c02b7eb070af22d149689bda2a817bfbbe11d0506633944bf6ab148477c4cf7ea4e0da498a43d2b9299a19d2b072eb40f5ae21375f793cb0a0535dcc01975f86e9781c8589c79d2d29d70b5c9c504361f5479d80a2dae1ff52a40bfd779987ff43a9f8d4cadf3517d9349abc41cdab739ae335be23a12fa18d9ccd9f637436b286c97ceb08bedd817522c4546e978c68150081dd3eb7f0d17a43f8e34bcaa2d638262fd96d7f087203ef214f4f2035d706e526396aea86b0de3f3679ed3b0eb71244a8468bc7a7d8d1015fbec08ab3e1d61e5587404e838eec4e37123d396c741cda5b70a51363d0dfae4363d0d183e95883385f303c966c2fa5425799943964784b9c8515520acff6d587c192963a9bf891bcc158ac1c3696c4fc19d00ee6368fe8bf613c5a23f36fdf757859c1a6d60f57bd79f109021eca1fa926d2b4a1c26bcaad1c76da90c6a01571df61c404d39fd6df6315b9732ed5469aaf1b4be7f2fa78d9c2cddf2a361c413c18b3324bb3e6e427e429546ffde1a8424efe4c711e0a4a2bff51da09de38ebcb0a99d4c85a619d8b5343b738b62304cbf30e0f823cbb19b2133efebaac714cc4c97ff4d84e82b33dee963208e930dfac8cdb7f81114534bbcf8d11992979b13247506c397d3b7a67d949374c37421daffd8198c5e70e42a08766022e5186f7bf023cf834422f65d6c5d34060c0b4e830557ce0ff81029a66f40f6bb312a5f1a1e3a7e239aa3903a53aa200", 0x1000, 0x1, 0x0, 0x3, r1}]) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x80, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000001640)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:13:30 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a00010000040000000000000000000000000000cb510000ffffac141400e000000200000000000000000000000000000000000000000000000000000000539d9bcf952ddf906203ed55a0ac0bc8ed2c3ff6e0ba422f", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESOCT=r2], 0xfc}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:13:30 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1733.312458] loop0: detected capacity change from 0 to 2103296 [ 1733.312643] FAULT_INJECTION: forcing a failure. [ 1733.312643] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.315651] CPU: 0 PID: 23108 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1733.316639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.317763] Call Trace: [ 1733.318127] dump_stack+0x107/0x167 [ 1733.318638] should_fail.cold+0x5/0xa [ 1733.319154] ? create_object.isra.0+0x3a/0xa20 [ 1733.319773] should_failslab+0x5/0x20 [ 1733.320311] kmem_cache_alloc+0x5b/0x310 [ 1733.320860] create_object.isra.0+0x3a/0xa20 [ 1733.321472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.322181] kmem_cache_alloc+0x159/0x310 [ 1733.322756] vm_area_dup+0x78/0x290 [ 1733.323260] ? __lock_acquire+0xbb1/0x5b00 [ 1733.323842] ? perf_trace_lock+0xac/0x490 [ 1733.324418] ? __lockdep_reset_lock+0x180/0x180 [ 1733.325063] ? vm_area_alloc+0x110/0x110 [ 1733.325606] ? find_held_lock+0x2c/0x110 [ 1733.326172] ? get_mm_exe_file+0x139/0x310 [ 1733.326739] ? lock_downgrade+0x6d0/0x6d0 [ 1733.327307] ? down_write_nested+0xe4/0x160 [ 1733.327896] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1733.328606] ? get_mm_exe_file+0x162/0x310 [ 1733.329180] copy_process+0x291b/0x7800 [ 1733.329719] ? __lock_acquire+0xbb1/0x5b00 [ 1733.330307] ? __cleanup_sighand+0xb0/0xb0 [ 1733.330892] ? find_held_lock+0x2c/0x110 [ 1733.331445] kernel_clone+0xe7/0x980 [ 1733.331944] ? lock_downgrade+0x6d0/0x6d0 [ 1733.332518] ? find_held_lock+0x2c/0x110 [ 1733.333066] ? create_io_thread+0xf0/0xf0 [ 1733.333634] ? ksys_write+0x12d/0x260 [ 1733.334153] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1733.334811] __do_sys_fork+0x8a/0xc0 [ 1733.335313] ? kernel_thread+0xf0/0xf0 [ 1733.335855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.336566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.337257] ? trace_hardirqs_on+0x5b/0x180 [ 1733.337840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.338526] do_syscall_64+0x33/0x40 [ 1733.339028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1733.339716] RIP: 0033:0x7f6c66cd7b19 [ 1733.340224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.342723] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1733.343757] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1733.344768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.345723] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.346704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.347677] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:13:30 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0x0, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) [ 1733.372049] loop0: detected capacity change from 0 to 2103296 12:13:30 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5423, 0xffffffffffffffe0) copy_file_range(r1, &(0x7f00000012c0)=0x800, 0xffffffffffffffff, &(0x7f0000001300)=0x57e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000a00), 0x8, 0x12080) recvmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000840)=""/90, 0x5a}, {&(0x7f00000008c0)=""/130, 0x82}, {&(0x7f0000000980)=""/77, 0x4d}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/146, 0x92}], 0x9, &(0x7f0000000bc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x10041) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000001280)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x9, 0x20, 0x1c, @mcast1, @mcast2, 0x8000, 0x40, 0x7ff, 0xfffffffc}}) sendmsg$nl_xfrm(r2, &(0x7f0000001240)={&(0x7f0000000380), 0xc, &(0x7f0000001200)={&(0x7f0000000e00)=@newsa={0x3ec, 0x10, 0x200, 0x70bd2a, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e20, 0xf2, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x29, 0x0, r3}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x4d6, 0xff}, @in=@loopback, {0x10000, 0x8, 0x8, 0x100, 0x6, 0x7, 0x2, 0x3}, {0x80000001, 0x3, 0x3, 0xfffffffffffffffa}, {0x3, 0x2, 0x9}, 0x70bd26, 0x3507, 0xa, 0x3, 0xef, 0x88}, [@tmpl={0x84, 0x5, [{{@in=@multicast1, 0x4d6, 0x6c}, 0x2, @in=@remote, 0x0, 0x4, 0x3, 0x40, 0x3, 0x5, 0xffffffff}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in=@loopback, 0x3501, 0x0, 0x3, 0x7f, 0x3, 0x1, 0xff}]}, @lastused={0xc, 0xf, 0x5}, @etimer_thresh={0x8, 0xc, 0x3}, @tfcpad={0x8, 0x16, 0x2}, @etimer_thresh={0x8, 0xc, 0xa7}, @algo_aead={0x129, 0x12, {{'authenc(xcbc-aes-neon,cbc-twofish-3way)\x00'}, 0x6e8, 0x0, "6b5a7833916f7991761823682ca54549959e99a28c45c6628bc18e741b1cab0bf760cea2b1959a90c6baca2c2c3c166bdc00a71677935de3b3c4599b151c05deafa0ebccd29543a7552ab9c3a72f91b13823eb78ae45ea567cc04004d013521ccd00c07dfd37f0de505674135b3cdffeb08c82f64265a94d93e13e7f8f98cbfb9fef761184908adfb0dc4297eedc9e3ab3cec96edf78f6c6ef2b35d3fa332c8cf940c040745d3a58021238d4ba2028ef0dc20eff4609ab01e689e2f3cfd23b99faab67f8cb96389601022efb7794b76c9e9f41f7608ad3f229a164c202"}}, @sa={0xe4, 0x6, {{@in=@empty, @in=@multicast2, 0x4e21, 0x3ff, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x3c, r5, 0xee01}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x3c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x43, 0x1ff, 0x5, 0x3, 0x200, 0x10000, 0x83f, 0x3}, {0x0, 0x8, 0x9, 0x5}, {0x80000000, 0x2, 0x7ff}, 0x70bd2c, 0x3506, 0x2, 0x0, 0x9, 0x8d}}, @lifetime_val={0x24, 0x9, {0x80, 0x8}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd27, 0x70bd27, 0xfff, [0xc76]}}]}, 0x3ec}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:13:30 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 27) 12:13:30 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x7e, 0x6, 0x1, 0x0, 0x5, 0x88000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x400c, 0x3, 0xc5c, 0x7, 0x1f, 0x81, 0x100, 0x0, 0x10000, 0x0, 0x81}, 0xffffffffffffffff, 0xf, r0, 0x8) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() mlock(&(0x7f0000fef000/0x1000)=nil, 0x1000) rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:13:30 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0x0, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) [ 1733.674425] FAULT_INJECTION: forcing a failure. [ 1733.674425] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.678460] CPU: 1 PID: 23576 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1733.679919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.681676] Call Trace: [ 1733.682235] dump_stack+0x107/0x167 [ 1733.683002] should_fail.cold+0x5/0xa [ 1733.683806] ? vm_area_dup+0x78/0x290 [ 1733.684628] should_failslab+0x5/0x20 [ 1733.685441] kmem_cache_alloc+0x5b/0x310 [ 1733.686303] vm_area_dup+0x78/0x290 [ 1733.687077] ? __lock_acquire+0xbb1/0x5b00 [ 1733.687988] ? perf_trace_lock+0xac/0x490 [ 1733.688888] ? __lockdep_reset_lock+0x180/0x180 [ 1733.689879] ? vm_area_alloc+0x110/0x110 [ 1733.690727] ? find_held_lock+0x2c/0x110 [ 1733.691580] ? get_mm_exe_file+0x139/0x310 [ 1733.692483] ? lock_downgrade+0x6d0/0x6d0 [ 1733.693365] ? down_write_nested+0xe4/0x160 [ 1733.694270] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1733.695342] ? get_mm_exe_file+0x162/0x310 [ 1733.696245] copy_process+0x291b/0x7800 [ 1733.697087] ? __lock_acquire+0xbb1/0x5b00 [ 1733.698023] ? __cleanup_sighand+0xb0/0xb0 [ 1733.698941] ? find_held_lock+0x2c/0x110 [ 1733.699804] kernel_clone+0xe7/0x980 [ 1733.700594] ? lock_downgrade+0x6d0/0x6d0 [ 1733.701458] ? find_held_lock+0x2c/0x110 [ 1733.702312] ? create_io_thread+0xf0/0xf0 [ 1733.703189] ? ksys_write+0x12d/0x260 [ 1733.704001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1733.705031] __do_sys_fork+0x8a/0xc0 [ 1733.705811] ? kernel_thread+0xf0/0xf0 [ 1733.706656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.707761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.708838] ? trace_hardirqs_on+0x5b/0x180 [ 1733.709743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.710828] do_syscall_64+0x33/0x40 [ 1733.711609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1733.712686] RIP: 0033:0x7fd58bf37b19 [ 1733.713470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.717372] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1733.718964] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1733.720463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.721960] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.723456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.724975] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:13:31 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 30) 12:13:31 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r2 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r3, 0xf, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) [ 1733.784420] FAULT_INJECTION: forcing a failure. [ 1733.784420] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.787020] CPU: 1 PID: 23804 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1733.788492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.790231] Call Trace: [ 1733.790799] dump_stack+0x107/0x167 [ 1733.791570] should_fail.cold+0x5/0xa [ 1733.792385] ? create_object.isra.0+0x3a/0xa20 [ 1733.793349] should_failslab+0x5/0x20 [ 1733.794154] kmem_cache_alloc+0x5b/0x310 [ 1733.795017] create_object.isra.0+0x3a/0xa20 [ 1733.795956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.797043] kmem_cache_alloc+0x159/0x310 [ 1733.797922] vm_area_dup+0x78/0x290 [ 1733.798699] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1733.799700] ? lock_downgrade+0x6d0/0x6d0 [ 1733.800588] ? copy_page_range+0x24e9/0x3810 [ 1733.801542] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1733.802537] ? avc_has_extended_perms+0xf40/0xf40 [ 1733.803563] ? vm_area_alloc+0x110/0x110 [ 1733.804429] ? find_held_lock+0x2c/0x110 [ 1733.805296] ? selinux_vm_enough_memory+0x114/0x180 [ 1733.806350] ? selinux_sb_statfs+0x250/0x250 [ 1733.807279] ? percpu_counter_add_batch+0x8b/0x140 [ 1733.808320] ? __vm_enough_memory+0x184/0x360 [ 1733.809264] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1733.810355] copy_process+0x291b/0x7800 [ 1733.811228] ? __cleanup_sighand+0xb0/0xb0 [ 1733.812135] ? find_held_lock+0x2c/0x110 [ 1733.813004] kernel_clone+0xe7/0x980 [ 1733.813795] ? lock_downgrade+0x6d0/0x6d0 [ 1733.814666] ? find_held_lock+0x2c/0x110 [ 1733.815523] ? create_io_thread+0xf0/0xf0 [ 1733.816414] ? ksys_write+0x12d/0x260 [ 1733.817221] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1733.818245] __do_sys_fork+0x8a/0xc0 [ 1733.819031] ? kernel_thread+0xf0/0xf0 [ 1733.819872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.820982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.822070] ? trace_hardirqs_on+0x5b/0x180 [ 1733.822976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.824062] do_syscall_64+0x33/0x40 [ 1733.824864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1733.825942] RIP: 0033:0x7f6c66cd7b19 [ 1733.826725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.830823] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1733.832437] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1733.833929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.835413] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.836907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.838397] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:13:46 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) close_range(r0, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000380)={0x8, 0x3, 0x3ff}) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x19, 0x100, 0x70bd29, 0x25dfdbfd, {0x13}, [@generic="8f3f3e60eb021d120f905a627f75b02b0ea94978e50a6155ee0073a76d4119d78fbee04b16961c669db57584c3f0989e170423390891ba7a6de2114468fcbb27fa16a6e0de27bc77a94733fe0670ddb1248e17b3e3e6393318ce6fd20eeb2d", @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c004) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e0000002000000000000000000000000000000000000000000000000000000000b081bd83c040766a8f3fce3d8bcb8fe4238e07d53682034d304a00ffcfb3b7b33511eee807d114aade7fa0bbe98b9d968f1ff76dbf70291fc8ecff7726d636e3c96b72aa2470791c5eda1143e9cc7330464ac77814ed559a7f1b40f92a9d014c36bf6d3c80d107756a11f2ed67ee9c32dfa5aa531014569098c9b4199f2275cf7ddaf18a48893d0949be3bc6b7077b7f65c67119ffce806897786142b6f8af0e964b9f05f675b37c7724d4c34d19982335fa4270e2f684373e89c7bfd6bc173b8d89c9f2597cec41971f19e3c0d11d0a19ca7aa49fa3c53831037de1014a43f1feaab86e1743374485d1ef509f56a77614a2b4522d875a86b9eed05575bfd4f391845d74ecfc61e4fb20b67f82cc45a4c975e8a4f8951e0364a5fa7c359d41c97a57c80f969ddf7d382c2141614ca56783ee64cd3926ee689fe4d1685aeda0ee639979fb8cc1aa288eeee4aaf2bfd0f1a406fa1c473e239c024f3572af8c6135f668675dc34", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000500)='\x00', 0x1) fork() 12:13:46 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 31) 12:13:46 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 28) 12:13:46 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000006c0)=ANY=[@ANYBLOB="011d9724f5afbb0000000100000018000000", @ANYRES32=r0, @ANYBLOB="3f000000000000002e2f66696c6530004cb13dfc4bcbab5c7487a5345d246ccba9899801881affaba42ec6bcfc7bbf91b3a48040c401ceb004e0d761b01c37fb7190549e5500b2ad61fbec8af4f422ad3029f35efcb19eb33eed79ba13b8f441d779190afe5555fe84613f2a1d6d0f119d8a596ea463d2fcdb00068d0f463693b61b"]) syz_io_uring_setup(0x2ec5, &(0x7f0000000280)={0x0, 0xc119, 0x10, 0x0, 0x342, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000500)) syz_io_uring_setup(0x6e5c, &(0x7f0000000600)={0x0, 0xd8ec, 0x4, 0x0, 0x10, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000540)) 12:13:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:13:46 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r2 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r3, 0xf, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 12:13:46 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac101400e000000200000000000000000000000000000000000010000000002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000026bd7000000000000a00000800000000000000000c0008001300080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = socket$inet(0x2, 0x800, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x80, 0x1}) 12:13:46 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) fork() [ 1748.788977] FAULT_INJECTION: forcing a failure. [ 1748.788977] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.790708] CPU: 1 PID: 23851 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1748.791651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1748.792801] Call Trace: [ 1748.793174] dump_stack+0x107/0x167 [ 1748.793679] should_fail.cold+0x5/0xa [ 1748.794203] ? create_object.isra.0+0x3a/0xa20 [ 1748.794833] should_failslab+0x5/0x20 [ 1748.795355] kmem_cache_alloc+0x5b/0x310 [ 1748.795915] create_object.isra.0+0x3a/0xa20 [ 1748.796537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1748.797238] kmem_cache_alloc+0x159/0x310 [ 1748.797813] vm_area_dup+0x78/0x290 [ 1748.798323] ? __lock_acquire+0xbb1/0x5b00 [ 1748.798920] ? perf_trace_lock+0xac/0x490 [ 1748.799501] ? __lockdep_reset_lock+0x180/0x180 [ 1748.800144] ? vm_area_alloc+0x110/0x110 [ 1748.800706] ? find_held_lock+0x2c/0x110 [ 1748.801267] ? get_mm_exe_file+0x139/0x310 [ 1748.801850] ? lock_downgrade+0x6d0/0x6d0 [ 1748.802419] ? down_write_nested+0xe4/0x160 [ 1748.803011] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1748.803709] ? get_mm_exe_file+0x162/0x310 [ 1748.804292] copy_process+0x291b/0x7800 [ 1748.804846] ? __lock_acquire+0xbb1/0x5b00 [ 1748.805447] ? __cleanup_sighand+0xb0/0xb0 [ 1748.806039] ? find_held_lock+0x2c/0x110 [ 1748.806599] kernel_clone+0xe7/0x980 [ 1748.807114] ? lock_downgrade+0x6d0/0x6d0 [ 1748.807688] ? find_held_lock+0x2c/0x110 [ 1748.808240] ? create_io_thread+0xf0/0xf0 [ 1748.808819] ? ksys_write+0x12d/0x260 [ 1748.809358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1748.810023] __do_sys_fork+0x8a/0xc0 [ 1748.810533] ? kernel_thread+0xf0/0xf0 [ 1748.811080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1748.811792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1748.812495] ? trace_hardirqs_on+0x5b/0x180 [ 1748.813090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1748.813791] do_syscall_64+0x33/0x40 [ 1748.814300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1748.814995] RIP: 0033:0x7fd58bf37b19 [ 1748.815504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1748.818026] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1748.819066] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1748.820049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.821046] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.822034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.823026] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1748.838993] FAULT_INJECTION: forcing a failure. [ 1748.838993] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.840737] CPU: 1 PID: 23853 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1748.841683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1748.842191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1748.842826] Call Trace: [ 1748.842859] dump_stack+0x107/0x167 [ 1748.845650] should_fail.cold+0x5/0xa [ 1748.846176] ? anon_vma_clone+0xdc/0x590 [ 1748.846738] should_failslab+0x5/0x20 [ 1748.847254] kmem_cache_alloc+0x5b/0x310 [ 1748.847812] anon_vma_clone+0xdc/0x590 [ 1748.848348] anon_vma_fork+0x82/0x640 [ 1748.848880] ? __vm_enough_memory+0x184/0x360 [ 1748.849518] copy_process+0x7218/0x7800 [ 1748.850090] ? __cleanup_sighand+0xb0/0xb0 [ 1748.850689] ? find_held_lock+0x2c/0x110 [ 1748.851248] kernel_clone+0xe7/0x980 [ 1748.851759] ? lock_downgrade+0x6d0/0x6d0 [ 1748.852322] ? find_held_lock+0x2c/0x110 [ 1748.852881] ? create_io_thread+0xf0/0xf0 [ 1748.853448] ? ksys_write+0x12d/0x260 [ 1748.853967] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1748.854615] __do_sys_fork+0x8a/0xc0 [ 1748.855119] ? kernel_thread+0xf0/0xf0 [ 1748.855667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1748.856393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1748.857095] ? trace_hardirqs_on+0x5b/0x180 [ 1748.857686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1748.858396] do_syscall_64+0x33/0x40 [ 1748.858906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1748.859616] RIP: 0033:0x7f6c66cd7b19 [ 1748.860112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1748.862616] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1748.863652] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1748.864633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.865599] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.866559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.867519] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:13:46 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 29) 12:13:46 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r2 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r3, 0xf, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) [ 1749.009452] FAULT_INJECTION: forcing a failure. [ 1749.009452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1749.011062] CPU: 1 PID: 24038 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1749.011920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.012992] Call Trace: [ 1749.013326] dump_stack+0x107/0x167 [ 1749.013779] should_fail.cold+0x5/0xa [ 1749.014267] __alloc_pages_nodemask+0x182/0x600 [ 1749.014845] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1749.015606] alloc_pages_current+0x187/0x280 [ 1749.016166] __get_free_pages+0xc/0xa0 [ 1749.016663] pgd_alloc+0x84/0x4e0 [ 1749.017104] ? pgd_page_get_mm+0x40/0x40 [ 1749.017623] ? lockdep_init_map_type+0x2c7/0x780 [ 1749.018213] ? lockdep_init_map_type+0x2c7/0x780 [ 1749.018803] mm_init+0x670/0xab0 [ 1749.019221] copy_process+0x254d/0x7800 [ 1749.019712] ? __lock_acquire+0xbb1/0x5b00 [ 1749.020250] ? __cleanup_sighand+0xb0/0xb0 [ 1749.020782] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1749.021468] ? trace_hardirqs_on+0x5b/0x180 [ 1749.022008] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1749.022685] ? kernel_clone+0x2a8/0x980 [ 1749.023191] kernel_clone+0xe7/0x980 [ 1749.023651] ? lock_downgrade+0x6d0/0x6d0 [ 1749.024163] ? find_held_lock+0x2c/0x110 [ 1749.024668] ? create_io_thread+0xf0/0xf0 [ 1749.025181] ? ksys_write+0x12d/0x260 [ 1749.025656] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1749.026255] __do_sys_fork+0x8a/0xc0 [ 1749.026714] ? kernel_thread+0xf0/0xf0 [ 1749.027202] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.027853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.028499] ? trace_hardirqs_on+0x5b/0x180 [ 1749.029035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.029675] do_syscall_64+0x33/0x40 [ 1749.030136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1749.030765] RIP: 0033:0x7fd58bf37b19 [ 1749.031223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.033501] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1749.034457] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1749.035325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1749.036192] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.037065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.037937] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:13:46 executing program 5: mlock2(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getpeername$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r4 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:13:46 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 32) 12:13:46 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) [ 1749.177003] FAULT_INJECTION: forcing a failure. [ 1749.177003] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.178587] CPU: 1 PID: 24273 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1749.179388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.180350] Call Trace: [ 1749.180676] dump_stack+0x107/0x167 [ 1749.181107] should_fail.cold+0x5/0xa [ 1749.181566] ? create_object.isra.0+0x3a/0xa20 [ 1749.182098] should_failslab+0x5/0x20 [ 1749.182540] kmem_cache_alloc+0x5b/0x310 [ 1749.183014] create_object.isra.0+0x3a/0xa20 [ 1749.183533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1749.184111] kmem_cache_alloc+0x159/0x310 [ 1749.184609] anon_vma_clone+0xdc/0x590 [ 1749.185059] anon_vma_fork+0x82/0x640 [ 1749.185507] ? __vm_enough_memory+0x184/0x360 [ 1749.186035] copy_process+0x7218/0x7800 [ 1749.186523] ? __cleanup_sighand+0xb0/0xb0 [ 1749.187016] ? find_held_lock+0x2c/0x110 [ 1749.187485] kernel_clone+0xe7/0x980 [ 1749.187914] ? lock_downgrade+0x6d0/0x6d0 [ 1749.188394] ? find_held_lock+0x2c/0x110 [ 1749.188870] ? create_io_thread+0xf0/0xf0 [ 1749.189345] ? ksys_write+0x12d/0x260 [ 1749.189793] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1749.190354] __do_sys_fork+0x8a/0xc0 [ 1749.190787] ? kernel_thread+0xf0/0xf0 [ 1749.191254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1749.191864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.192474] ? trace_hardirqs_on+0x5b/0x180 [ 1749.192969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1749.193563] do_syscall_64+0x33/0x40 [ 1749.194004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1749.194596] RIP: 0033:0x7f6c66cd7b19 [ 1749.195025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1749.197137] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1749.197996] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1749.198798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1749.199605] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.200419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.201233] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:14:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 30) 12:14:00 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x8, r1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)={0xfffffffd, 0x0, 0x7}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:00 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 33) 12:14:00 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x1, 0xfffffffb, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000006c0)=@IORING_OP_ACCEPT={0xd, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000540)=0x80, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, 0x40800}, 0x8) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r9, {0x80000001}}, './file0\x00'}) 12:14:00 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) 12:14:00 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r3}}, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x2, 0x1f, 0x322, 0x4, 0x1, 0x1, {0x3, r3}}, 0x5) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x1010, r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000600)="bf1063271ec8c97ebbb18a34a20a4795ccfbd44dde555fc6c81af2b249efe0e40901acb29f5acd2d9154b231ef4008cd55761be9d6882a793abdbc245cc7acd35687be66ed9465d1781e3d979720a2bb268f4eaa7b67297ccc4d5d93fa66ac07cbafa438d3696b570483743516dd0b86590ead44fd34f0b23d4f28693ca4e297d20d2dbfdc0b91719f5ad47e652ee58a5d766809ecf7f660851807b40e5f7b523153283bc2fed4746fe3ccb63704b8fc3697ac99634a3d009f89993bfe5fe5e5469b0c3de64f5c6c16576b48d3ee83351af75aa90754fb0c8d7524", 0xdb, 0x48010, 0x1, {0x0, r3}}, 0x80000001) 12:14:00 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r2, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x2, &(0x7f0000000380)=""/144, 0x90}, 0x0, 0x10000, 0x1, {0x3}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:00 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000010c0)='\x00\'e\xec\xa1\x96\x00\xd0\xa9\xda\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1\xc1\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7%\x88}\x80\x1e\a\xf7\x1c\x90hjSsI\x8dyz\x1c\xb6\xe5\xb9', 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001140), 0x40100, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xc197afa93aa14f2a}, 0xc, &(0x7f0000001640)={&(0x7f00000011c0)={0x444, 0x3d, 0x100, 0x70bd27, 0x25dfdbfb, {0x1f}, [@nested={0x191, 0x73, 0x0, 0x1, [@generic="fd8895e63d9baf9416bcdc0599992d377b70be4fb918cabde061938e5138303b716112f8b21d713b947a7d6b9db53dd84483048a2c55e40f9eab6603c1ea25fb604f7195759e3d43d7c85253c5b5063676b90f79162bb7d846bea818a3d1408d4d7c87db3b7676627d26224a4bff741f062bff68d4796ca600ea02d8bc174b69911610b4c1699720ef3c6b470168556f493a077b1cfbf2dbdfb9e994cad7832fd022", @generic="d75702c1249ba70325383e651f6aa889af73021600cb714286952684c624fa5ab8a1ec3655f0761f2d9047aa45ab4c524a320f3083b576aebbc8c27a30bd758a1f70fc088fe2dcef19c34f9ca1665b9303495effd14eaddc4cfbebd7ad24a43d2bb6df146be60e2a37a0d87c37f1a420dd133d0224c5ced8ebe47102fa0bc403c0b438fcc6ecfde3fb69db250452e085ae0cbf85", @generic="a4423ee48beb6e0074878475e32b4cd7c3044270b4dbdd7bc02b985684bac4d83418e2035ea6cc1ec765e77204b443400f8427f5b6d60ea9be361fb28c83038d01bef3c8b26a41749ae4bd7e1e4d24e7e8bb21c9ac405b"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2}, @generic="a1fb0d37126464a741", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x583}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x62, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @nested={0x4, 0x89}, @nested={0x25c, 0x53, 0x0, 0x1, [@generic="34d020818da042ad3cc15be6e05536f9ebf09a9913d648bd402eabab58fc9dd07d7d84bedff47e48b16e3119171c45bf9b09942fca", @generic="d7a7086d6ec1e432e6683dd2de75f3b5243a616b96f45041da6891aa5faf75a9440bfd06a740f94ac21a1670c0ae1360c05d72614f5e741cf585379222c7d4984394783fbf9956c9cec1c63071b32c0aefa0423e97374cb7f46ec97ff45c298451e5d10eb681191dd6d16b179cd875742656f99e7d19034cbca70d5a", @generic="4a13b00852f2b223c839db04e4b5876fd7328f9f565c51ecbb4f12eb0c4c3fc670427227bd7426ace06f41bb3bb1e9ac816c700b4a007119d7545c12a656a174d18a57dfe19ca9b0d9a3d6174d01470216a111ad690e2e0b27debe7f9484a3a10d1f7f48f10d641b5bf345a93b854a2b38335f5c3cf30241491dd0c8b7cd0f7833be6029f9dc914c03342629042cd3023958c6c1ccbd0a634b8d7a6c8730dd46426301865c576ea174e517934889731a5cb76e439ede2377ebeee2f729aec3d3d82f984956d352", @generic="f946ebcb1f8ec1952690e21ae49da9a9536fd3eff6e7a36194e380232323bab769f54ef4d788765b14ea147f6b5cf69897fd036d21923a4c5a6edca1dbbfd06b840cf5cda1400b8a22343047a8883271f8112397420a7365344e921f0ebc2e2fe9f6a98a6a8deb572b2d4987206707ad499bbce8d3bc3cc504b7ae943eb4a9b8f82057aff89c81089cbb4489dd08506711292197b73046b6834ef72bca15499a7e65bf70f20d561e9289dd87dc1f9bad96d6a3ab9c6f9adb28f0841ac2db815fd14b8972b506053b1dcd028871f68e422a25afe2a7cd0fc189978ab97a3f981b"]}]}, 0x444}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1763.301628] loop0: detected capacity change from 0 to 2103296 [ 1763.305558] FAULT_INJECTION: forcing a failure. [ 1763.305558] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.308322] CPU: 1 PID: 24497 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1763.309793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1763.311554] Call Trace: [ 1763.312130] dump_stack+0x107/0x167 [ 1763.312562] FAULT_INJECTION: forcing a failure. [ 1763.312562] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.312912] should_fail.cold+0x5/0xa [ 1763.315374] ? create_object.isra.0+0x3a/0xa20 [ 1763.316343] should_failslab+0x5/0x20 [ 1763.317152] kmem_cache_alloc+0x5b/0x310 [ 1763.318009] create_object.isra.0+0x3a/0xa20 [ 1763.318936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1763.320013] kmem_cache_alloc+0x159/0x310 [ 1763.320908] vm_area_dup+0x78/0x290 [ 1763.321687] ? __lock_acquire+0xbb1/0x5b00 [ 1763.322602] ? perf_trace_lock+0xac/0x490 [ 1763.323487] ? __lockdep_reset_lock+0x180/0x180 [ 1763.324475] ? vm_area_alloc+0x110/0x110 [ 1763.325338] ? find_held_lock+0x2c/0x110 [ 1763.326200] ? get_mm_exe_file+0x139/0x310 [ 1763.327093] ? lock_downgrade+0x6d0/0x6d0 [ 1763.327970] ? down_write_nested+0xe4/0x160 [ 1763.328887] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1763.329964] ? get_mm_exe_file+0x162/0x310 [ 1763.330866] copy_process+0x291b/0x7800 [ 1763.331709] ? __lock_acquire+0xbb1/0x5b00 [ 1763.332639] ? __cleanup_sighand+0xb0/0xb0 [ 1763.333548] ? find_held_lock+0x2c/0x110 [ 1763.334414] kernel_clone+0xe7/0x980 [ 1763.335201] ? lock_downgrade+0x6d0/0x6d0 [ 1763.336069] ? find_held_lock+0x2c/0x110 [ 1763.336937] ? create_io_thread+0xf0/0xf0 [ 1763.337815] ? ksys_write+0x12d/0x260 [ 1763.338633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1763.339657] __do_sys_fork+0x8a/0xc0 [ 1763.340443] ? kernel_thread+0xf0/0xf0 [ 1763.341299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1763.342406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.343489] ? trace_hardirqs_on+0x5b/0x180 [ 1763.344398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.345491] do_syscall_64+0x33/0x40 [ 1763.346276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1763.347350] RIP: 0033:0x7fd58bf37b19 [ 1763.348138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1763.352025] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1763.353663] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1763.355180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1763.356689] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.358193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.359702] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1763.361252] CPU: 0 PID: 24486 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1763.362300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1763.363515] Call Trace: [ 1763.363922] dump_stack+0x107/0x167 [ 1763.364470] should_fail.cold+0x5/0xa [ 1763.365042] ? anon_vma_fork+0xf1/0x640 [ 1763.365631] should_failslab+0x5/0x20 [ 1763.366187] kmem_cache_alloc+0x5b/0x310 [ 1763.366783] anon_vma_fork+0xf1/0x640 [ 1763.367339] ? __vm_enough_memory+0x184/0x360 [ 1763.367987] copy_process+0x7218/0x7800 [ 1763.368613] ? __cleanup_sighand+0xb0/0xb0 [ 1763.369240] ? find_held_lock+0x2c/0x110 [ 1763.369839] kernel_clone+0xe7/0x980 [ 1763.370381] ? lock_downgrade+0x6d0/0x6d0 [ 1763.370980] ? find_held_lock+0x2c/0x110 [ 1763.371576] ? create_io_thread+0xf0/0xf0 [ 1763.372183] ? ksys_write+0x12d/0x260 [ 1763.372759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1763.373472] __do_sys_fork+0x8a/0xc0 [ 1763.374007] ? kernel_thread+0xf0/0xf0 [ 1763.374585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1763.375341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.376088] ? trace_hardirqs_on+0x5b/0x180 [ 1763.376727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.377475] do_syscall_64+0x33/0x40 [ 1763.378014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1763.378764] RIP: 0033:0x7f6c66cd7b19 [ 1763.379302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1763.381984] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1763.383112] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1763.384153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1763.385207] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.386227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.387273] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:14:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 31) 12:14:00 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) [ 1763.469499] FAULT_INJECTION: forcing a failure. [ 1763.469499] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.472291] CPU: 1 PID: 24557 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1763.473761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1763.475517] Call Trace: [ 1763.476090] dump_stack+0x107/0x167 [ 1763.476878] should_fail.cold+0x5/0xa [ 1763.477686] ? vm_area_dup+0x78/0x290 [ 1763.478492] should_failslab+0x5/0x20 [ 1763.479294] kmem_cache_alloc+0x5b/0x310 [ 1763.480160] vm_area_dup+0x78/0x290 [ 1763.480948] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1763.481938] ? lock_downgrade+0x6d0/0x6d0 [ 1763.482813] ? copy_page_range+0x24e9/0x3810 [ 1763.483760] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1763.484754] ? avc_has_extended_perms+0xf40/0xf40 [ 1763.485791] ? vm_area_alloc+0x110/0x110 [ 1763.486646] ? find_held_lock+0x2c/0x110 [ 1763.487517] ? selinux_vm_enough_memory+0x114/0x180 [ 1763.488584] ? selinux_sb_statfs+0x250/0x250 [ 1763.489512] ? percpu_counter_add_batch+0x8b/0x140 [ 1763.490554] ? __vm_enough_memory+0x184/0x360 [ 1763.491501] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1763.492601] copy_process+0x291b/0x7800 [ 1763.493475] ? __cleanup_sighand+0xb0/0xb0 [ 1763.494389] ? find_held_lock+0x2c/0x110 [ 1763.495257] kernel_clone+0xe7/0x980 [ 1763.496041] ? lock_downgrade+0x6d0/0x6d0 [ 1763.496918] ? find_held_lock+0x2c/0x110 [ 1763.497772] ? create_io_thread+0xf0/0xf0 [ 1763.498653] ? ksys_write+0x12d/0x260 [ 1763.499469] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1763.500498] __do_sys_fork+0x8a/0xc0 [ 1763.501295] ? kernel_thread+0xf0/0xf0 [ 1763.502137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1763.503250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.504329] ? trace_hardirqs_on+0x5b/0x180 [ 1763.505248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.506325] do_syscall_64+0x33/0x40 [ 1763.507119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1763.508200] RIP: 0033:0x7fd58bf37b19 [ 1763.508998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1763.512916] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1763.514526] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1763.516025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1763.517549] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.519055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.520583] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:14:00 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x11, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) creat(&(0x7f0000000240)='./file0\x00', 0x180) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000280), 0x8) fork() 12:14:00 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) pkey_mprotect(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, r2) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:00 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r1 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r1}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0x1407, &(0x7f0000000500)={0x0, 0x6189, 0x8, 0x0, 0x16d}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000640)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x1, 0x6, 0x0, 0x0, 0x3, 0x1}, 0x81) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:00 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:01 executing program 3: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000240)={0x0, 0x976b, 0x0, 0x2, 0x38e}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x2, 0x3, 0x399, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:01 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 34) 12:14:01 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x4840, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r2, 0x271, 0x0, 0x8, 0x0, 0x0, {0x0, r5}}, 0x78fd) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f00000000000000000000000000000f003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1763.821473] FAULT_INJECTION: forcing a failure. [ 1763.821473] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.822959] CPU: 0 PID: 25166 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1763.823792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1763.824815] Call Trace: [ 1763.825143] dump_stack+0x107/0x167 [ 1763.825591] should_fail.cold+0x5/0xa [ 1763.826064] ? create_object.isra.0+0x3a/0xa20 [ 1763.826623] should_failslab+0x5/0x20 [ 1763.827092] kmem_cache_alloc+0x5b/0x310 [ 1763.827589] create_object.isra.0+0x3a/0xa20 [ 1763.828130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1763.828767] kmem_cache_alloc+0x159/0x310 [ 1763.829283] anon_vma_fork+0xf1/0x640 [ 1763.829746] ? __vm_enough_memory+0x184/0x360 [ 1763.830293] copy_process+0x7218/0x7800 [ 1763.830806] ? __cleanup_sighand+0xb0/0xb0 [ 1763.831341] ? find_held_lock+0x2c/0x110 [ 1763.831840] kernel_clone+0xe7/0x980 [ 1763.832299] ? lock_downgrade+0x6d0/0x6d0 [ 1763.832811] ? find_held_lock+0x2c/0x110 [ 1763.833317] ? create_io_thread+0xf0/0xf0 [ 1763.833828] ? ksys_write+0x12d/0x260 [ 1763.834303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1763.834898] __do_sys_fork+0x8a/0xc0 [ 1763.835354] ? kernel_thread+0xf0/0xf0 [ 1763.835843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1763.836489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.837125] ? trace_hardirqs_on+0x5b/0x180 [ 1763.837649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1763.838282] do_syscall_64+0x33/0x40 [ 1763.838741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1763.839367] RIP: 0033:0x7f6c66cd7b19 [ 1763.839826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1763.842092] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1763.843019] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1763.843886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1763.844759] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.845627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.846496] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:14:15 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000d79f00000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:15 executing program 5: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000800000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80008800000) 12:14:15 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 35) 12:14:15 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc003f0000000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:15 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:15 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 32) 12:14:15 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x4) dup2(r2, r1) fork() 12:14:15 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10880, 0x0, 0x460, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r1, 0x1, 0x8000, 0x4}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x3, 0x6, 0x4, 0x0, 0x6, 0x100, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc085, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x10008, 0xfffffffffffffffb, 0x40, 0x6, 0x34807880, 0x3, 0x7fff}, 0xffffffffffffffff, 0x1, r3, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1010, r3, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xce53) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r7}}, 0x1000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x8, 0x0, "20715486f252a8f1284b200c127b4f35d650c61da3304111194a424bf2fe33aa5559e01b05f4726f951b4c4d94bba4a3386b3739a4192e1d1d6e9d495846c3", 0x31}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) fork() [ 1777.847532] FAULT_INJECTION: forcing a failure. [ 1777.847532] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.850371] CPU: 0 PID: 25544 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1777.851936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1777.853818] Call Trace: [ 1777.854422] dump_stack+0x107/0x167 [ 1777.855246] should_fail.cold+0x5/0xa [ 1777.856121] ? create_object.isra.0+0x3a/0xa20 [ 1777.857167] should_failslab+0x5/0x20 [ 1777.857606] FAULT_INJECTION: forcing a failure. [ 1777.857606] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.858022] kmem_cache_alloc+0x5b/0x310 [ 1777.858051] create_object.isra.0+0x3a/0xa20 [ 1777.861585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1777.862732] kmem_cache_alloc+0x159/0x310 [ 1777.863669] anon_vma_clone+0xdc/0x590 [ 1777.864550] anon_vma_fork+0x82/0x640 [ 1777.865411] ? __vm_enough_memory+0x184/0x360 [ 1777.866424] copy_process+0x7218/0x7800 [ 1777.867358] ? __cleanup_sighand+0xb0/0xb0 [ 1777.868327] ? find_held_lock+0x2c/0x110 [ 1777.869255] kernel_clone+0xe7/0x980 [ 1777.870093] ? lock_downgrade+0x6d0/0x6d0 [ 1777.871020] ? find_held_lock+0x2c/0x110 [ 1777.871931] ? create_io_thread+0xf0/0xf0 [ 1777.872868] ? ksys_write+0x12d/0x260 [ 1777.873730] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1777.874812] __do_sys_fork+0x8a/0xc0 [ 1777.875646] ? kernel_thread+0xf0/0xf0 [ 1777.876537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1777.877722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1777.878866] ? trace_hardirqs_on+0x5b/0x180 [ 1777.879837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1777.880995] do_syscall_64+0x33/0x40 [ 1777.881826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1777.882969] RIP: 0033:0x7fd58bf37b19 [ 1777.883803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1777.887940] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1777.889648] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1777.891244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1777.892854] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1777.894448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1777.896052] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1777.897690] CPU: 1 PID: 25551 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1777.898740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1777.899936] Call Trace: [ 1777.900333] dump_stack+0x107/0x167 [ 1777.900876] should_fail.cold+0x5/0xa [ 1777.901434] ? anon_vma_fork+0x1ff/0x640 [ 1777.902019] should_failslab+0x5/0x20 [ 1777.902578] kmem_cache_alloc+0x5b/0x310 [ 1777.903197] anon_vma_fork+0x1ff/0x640 [ 1777.903759] copy_process+0x7218/0x7800 [ 1777.904353] ? __cleanup_sighand+0xb0/0xb0 [ 1777.904996] ? find_held_lock+0x2c/0x110 [ 1777.905603] kernel_clone+0xe7/0x980 [ 1777.906154] ? lock_downgrade+0x6d0/0x6d0 [ 1777.906763] ? find_held_lock+0x2c/0x110 [ 1777.907363] ? create_io_thread+0xf0/0xf0 [ 1777.907961] ? ksys_write+0x12d/0x260 [ 1777.908523] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1777.909232] __do_sys_fork+0x8a/0xc0 [ 1777.909773] ? kernel_thread+0xf0/0xf0 [ 1777.910351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1777.911102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1777.911845] ? trace_hardirqs_on+0x5b/0x180 [ 1777.912468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1777.913220] do_syscall_64+0x33/0x40 [ 1777.913757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1777.914493] RIP: 0033:0x7f6c66cd7b19 [ 1777.915021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1777.917670] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1777.918762] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1777.919777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1777.920802] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1777.921820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1777.922845] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:14:15 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:15 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 36) 12:14:15 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000080)=0x7, 0x80000000000000, 0x2) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() syz_io_uring_setup(0x2da1, &(0x7f00000000c0)={0x0, 0x1647, 0x8, 0x0, 0x14f}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x1000) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd_index, 0x100000001, 0xc74, 0x7, 0x0, 0x1, {0x2, r5}}, 0x4) rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:15 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1778.115977] FAULT_INJECTION: forcing a failure. [ 1778.115977] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.118397] CPU: 1 PID: 25826 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1778.119329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.120442] Call Trace: [ 1778.120805] dump_stack+0x107/0x167 [ 1778.121304] should_fail.cold+0x5/0xa [ 1778.121801] ? create_object.isra.0+0x3a/0xa20 [ 1778.122427] should_failslab+0x5/0x20 [ 1778.122938] kmem_cache_alloc+0x5b/0x310 [ 1778.123472] create_object.isra.0+0x3a/0xa20 [ 1778.124086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1778.124759] kmem_cache_alloc+0x159/0x310 [ 1778.125325] anon_vma_fork+0x1ff/0x640 [ 1778.125852] copy_process+0x7218/0x7800 [ 1778.126412] ? __cleanup_sighand+0xb0/0xb0 [ 1778.126983] ? find_held_lock+0x2c/0x110 [ 1778.127524] kernel_clone+0xe7/0x980 [ 1778.128011] ? lock_downgrade+0x6d0/0x6d0 [ 1778.128543] ? find_held_lock+0x2c/0x110 [ 1778.129084] ? create_io_thread+0xf0/0xf0 [ 1778.129624] ? ksys_write+0x12d/0x260 [ 1778.130129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1778.130766] __do_sys_fork+0x8a/0xc0 [ 1778.131267] ? kernel_thread+0xf0/0xf0 [ 1778.131780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1778.132465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.133136] ? trace_hardirqs_on+0x5b/0x180 [ 1778.133712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.134396] do_syscall_64+0x33/0x40 [ 1778.134886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1778.135555] RIP: 0033:0x7f6c66cd7b19 [ 1778.136043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1778.138494] RSP: 002b:00007f6c6424d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1778.139487] RAX: ffffffffffffffda RBX: 00007f6c66deaf60 RCX: 00007f6c66cd7b19 [ 1778.140433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1778.141372] RBP: 00007f6c6424d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1778.142296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1778.143231] R13: 00007ffe6aa8c11f R14: 00007f6c6424d300 R15: 0000000000022000 12:14:15 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 33) 12:14:15 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) [ 1778.227846] FAULT_INJECTION: forcing a failure. [ 1778.227846] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.229497] CPU: 1 PID: 26067 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1778.230350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.231357] Call Trace: [ 1778.231688] dump_stack+0x107/0x167 [ 1778.232138] should_fail.cold+0x5/0xa [ 1778.232614] ? anon_vma_fork+0xf1/0x640 [ 1778.233110] should_failslab+0x5/0x20 [ 1778.233590] kmem_cache_alloc+0x5b/0x310 [ 1778.234093] anon_vma_fork+0xf1/0x640 [ 1778.234571] ? __vm_enough_memory+0x184/0x360 [ 1778.235135] copy_process+0x7218/0x7800 [ 1778.235644] ? __cleanup_sighand+0xb0/0xb0 [ 1778.236177] ? find_held_lock+0x2c/0x110 [ 1778.236680] kernel_clone+0xe7/0x980 [ 1778.237146] ? lock_downgrade+0x6d0/0x6d0 [ 1778.237662] ? find_held_lock+0x2c/0x110 [ 1778.238161] ? create_io_thread+0xf0/0xf0 [ 1778.238672] ? ksys_write+0x12d/0x260 [ 1778.239158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1778.239761] __do_sys_fork+0x8a/0xc0 [ 1778.240230] ? kernel_thread+0xf0/0xf0 [ 1778.240726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1778.241373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.242004] ? trace_hardirqs_on+0x5b/0x180 [ 1778.242532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1778.243157] do_syscall_64+0x33/0x40 [ 1778.243611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1778.244232] RIP: 0033:0x7fd58bf37b19 [ 1778.244681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1778.246966] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1778.247913] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1778.248802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1778.249688] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1778.250560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1778.251444] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:14:29 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2d0fc3095bed5708, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x3f, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:29 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r6}}, 0x1000) syz_io_uring_submit(r3, r1, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x1, 0x4007, @fd_index=0x3, 0x8, &(0x7f0000000380)=[{&(0x7f0000000600)="ffca9e51dccecc11fb915b024a65dca0f519ffc9143a6b8b22dda0858167e92b35022828d1d5d11a3f38476f71bcf90867b8957cfe8bb6c038117aaeea55020a465f7aea1f1b2c879fa9ee7d42bf2c4e2a2ef5397076a67ff4ec12a91a740f648800286f1a4c25223bb8b3f679bcda832606551d14ac05cbde72c11aa5d1e5d26a50d40315e15614bfe319bdd21db502b62e0e6f9139b75c11929a9eb7", 0x9d}, {&(0x7f00000006c0)="d1c6aa887c57d575b12b38df3a02c4452ed164bc3e2de6061d937a518668493dbe9965afb6c295e0d4edab3f75821d004c8179799362ad604f6780b55ff9910cca7ea8cd285321b8ec31701b187e53b267d8283ffc33c5409e6afe0a87716d0644a95a6912028b6e04875465b4dc45c744f8bc1fd2e5b1df48c28985bda6facdf66c15531db5ba9a4e07448c67cc773741c5ca", 0x93}, {&(0x7f0000000780)="c5a4b91dbf3754d12ca665bb266a5ab9add78e73edaea2d418e15f2ad8d1bbe39c6f90b91d07420e79b6ff0971139022821c7cc87e7d29ca52a6d32e7f8e61b170408f80bf3919f1eec4533ec40e56e6d7e799fdb2c7049a4d0dd55dfafcbf61a25967246b6146e0120a685a90a606b7fa7eb3d45ebf4ba4a64f8019605210c8815eeffef77844a96e319f55cbe0476a64a880d3a985e3abd5a824e0e6f4d06c65184feadb2f5385", 0xa8}], 0x3, 0xa, 0x1, {0x3, r6}}, 0x5) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ff09ac1400"/53, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:29 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 34) 12:14:29 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:29 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 37) 12:14:29 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0xc8080) write$vga_arbiter(r1, &(0x7f00000002c0), 0xf) write$vga_arbiter(r1, &(0x7f0000000280)=@target={'target ', {'PCI:', '5', ':', 'f', ':', '1d', '.', '11'}}, 0x15) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:29 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@acquire={0x130, 0x17, 0x300, 0x70bd2a, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x4d2, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in=@rand_addr=0x64010102, @in6=@private1, 0x4e22, 0x1ff, 0x0, 0x0, 0x2, 0xa0, 0xa0, 0x32, 0x0, r3}, {{@in6=@mcast1, @in6=@local, 0x4e21, 0x0, 0x4e21, 0x0, 0x0, 0x80, 0x20, 0x3a, 0x0, r4}, {0x83, 0x4, 0x503, 0x2, 0x9, 0x2, 0x4ad, 0x3f}, {0x4, 0x1, 0xff}, 0xc0000000, 0x6e6bb1, 0x4168a5a3adc1745, 0x1, 0x1}, 0x0, 0x3, 0x6, 0x70bd27}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff8}]}, 0x130}}, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:29 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) [ 1792.576935] FAULT_INJECTION: forcing a failure. [ 1792.576935] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.579829] CPU: 1 PID: 26278 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1792.581450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.583362] Call Trace: [ 1792.583974] dump_stack+0x107/0x167 [ 1792.584819] should_fail.cold+0x5/0xa [ 1792.585723] ? create_object.isra.0+0x3a/0xa20 [ 1792.586779] should_failslab+0x5/0x20 [ 1792.587670] kmem_cache_alloc+0x5b/0x310 [ 1792.588618] create_object.isra.0+0x3a/0xa20 [ 1792.589644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1792.590817] kmem_cache_alloc+0x159/0x310 [ 1792.591772] anon_vma_fork+0xf1/0x640 [ 1792.592639] ? __vm_enough_memory+0x184/0x360 [ 1792.593689] copy_process+0x7218/0x7800 [ 1792.594647] ? __cleanup_sighand+0xb0/0xb0 [ 1792.595630] ? find_held_lock+0x2c/0x110 [ 1792.596571] kernel_clone+0xe7/0x980 [ 1792.597430] ? lock_downgrade+0x6d0/0x6d0 [ 1792.598378] ? find_held_lock+0x2c/0x110 [ 1792.599304] ? create_io_thread+0xf0/0xf0 [ 1792.600258] ? ksys_write+0x12d/0x260 [ 1792.601146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1792.602254] __do_sys_fork+0x8a/0xc0 [ 1792.603099] ? kernel_thread+0xf0/0xf0 [ 1792.604004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1792.605211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.606378] ? trace_hardirqs_on+0x5b/0x180 [ 1792.607359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.608537] do_syscall_64+0x33/0x40 [ 1792.609394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1792.610553] RIP: 0033:0x7fd58bf37b19 [ 1792.611397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1792.615545] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1792.617283] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1792.618894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1792.620505] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1792.622136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1792.623767] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:14:30 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, r4, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) 12:14:30 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x40209, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x64, 0xff, 0x5, 0x2, 0x0, 0x11ad8857, 0x1000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x5}, 0x19071, 0x1, 0x3fc0, 0x4, 0x0, 0x2b2b06e7, 0x5, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, r4, 0xd) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r5 = getpid() rt_tgsigqueueinfo(r5, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:30 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0x1, 0xe5cf, 0x40, 0x400}) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1792.757651] loop5: detected capacity change from 0 to 2103296 12:14:30 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000001240)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001300), &(0x7f00000012c0)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3000007, 0x810, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001140)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000807d20000000000b5d7e9d91c5617776e41bd2e212d5cf5c76cdd5b660800271c7b"], 0xfc}, 0x1, 0x0, 0x0, 0x41}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x80, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1564b, 0x0, 0x460, 0x5, 0x0, 0x7, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x55c}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000010c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16=r3, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES16=r3]) r5 = getpgrp(0x0) ptrace(0x10, r5) kcmp(0x0, r5, 0x1, 0xffffffffffffffff, r4) fcntl$setown(0xffffffffffffffff, 0x8, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x99, 0xff, 0x1, 0x5, 0x0, 0x7, 0x4, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0xff, 0x1000}, 0x800, 0x3, 0x7fffffff, 0x7, 0x7, 0xd311, 0x8001, 0x0, 0x3, 0x0, 0x2}, r5, 0xe, 0xffffffffffffffff, 0x8) fork() [ 1792.788365] loop4: detected capacity change from 0 to 2103296 12:14:30 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:30 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x11010, 0x84b, 0x0, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:14:30 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x4dd2, 0x0, 0x0, 0x39b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000380)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:30 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) r5 = getpgrp(0x0) ptrace(0x10, r5) kcmp(0x0, r5, 0x1, r1, r4) fcntl$setown(0xffffffffffffffff, 0x8, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001400)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\tK?', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x3, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @private2}}}}}}, 0x0) ptrace(0x4207, r5) 12:14:30 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 35) [ 1793.040555] FAULT_INJECTION: forcing a failure. [ 1793.040555] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.043370] CPU: 1 PID: 27170 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1793.044854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1793.046622] Call Trace: [ 1793.047198] dump_stack+0x107/0x167 [ 1793.047974] should_fail.cold+0x5/0xa [ 1793.048781] ? anon_vma_fork+0x1ff/0x640 [ 1793.049654] should_failslab+0x5/0x20 [ 1793.050624] kmem_cache_alloc+0x5b/0x310 [ 1793.051491] anon_vma_fork+0x1ff/0x640 [ 1793.052328] copy_process+0x7218/0x7800 12:14:30 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) pkey_mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x8, r2) gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) getpid() munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1793.053220] ? __cleanup_sighand+0xb0/0xb0 [ 1793.054260] ? find_held_lock+0x2c/0x110 [ 1793.055126] kernel_clone+0xe7/0x980 [ 1793.056019] ? lock_downgrade+0x6d0/0x6d0 [ 1793.056911] ? find_held_lock+0x2c/0x110 [ 1793.057779] ? create_io_thread+0xf0/0xf0 [ 1793.058667] ? ksys_write+0x12d/0x260 [ 1793.059488] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1793.060631] __do_sys_fork+0x8a/0xc0 [ 1793.061431] ? kernel_thread+0xf0/0xf0 [ 1793.062274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1793.063385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.064590] ? trace_hardirqs_on+0x5b/0x180 [ 1793.065516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1793.066604] do_syscall_64+0x33/0x40 [ 1793.067388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1793.068615] RIP: 0033:0x7fd58bf37b19 [ 1793.069420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1793.073332] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1793.074931] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1793.076433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1793.077953] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1793.079460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.080964] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:14:30 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000010c0)='\x00\'e\xec\xa1\x96\x00\xd0\xa9\xda\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1\xc1\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7%\x88}\x80\x1e\a\xf7\x1c\x90hjSsI\x8dyz\x1c\xb6\xe5\xb9', 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001140), 0x40100, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xc197afa93aa14f2a}, 0xc, &(0x7f0000001640)={&(0x7f00000011c0)={0x444, 0x3d, 0x100, 0x70bd27, 0x25dfdbfb, {0x1f}, [@nested={0x191, 0x73, 0x0, 0x1, [@generic="fd8895e63d9baf9416bcdc0599992d377b70be4fb918cabde061938e5138303b716112f8b21d713b947a7d6b9db53dd84483048a2c55e40f9eab6603c1ea25fb604f7195759e3d43d7c85253c5b5063676b90f79162bb7d846bea818a3d1408d4d7c87db3b7676627d26224a4bff741f062bff68d4796ca600ea02d8bc174b69911610b4c1699720ef3c6b470168556f493a077b1cfbf2dbdfb9e994cad7832fd022", @generic="d75702c1249ba70325383e651f6aa889af73021600cb714286952684c624fa5ab8a1ec3655f0761f2d9047aa45ab4c524a320f3083b576aebbc8c27a30bd758a1f70fc088fe2dcef19c34f9ca1665b9303495effd14eaddc4cfbebd7ad24a43d2bb6df146be60e2a37a0d87c37f1a420dd133d0224c5ced8ebe47102fa0bc403c0b438fcc6ecfde3fb69db250452e085ae0cbf85", @generic="a4423ee48beb6e0074878475e32b4cd7c3044270b4dbdd7bc02b985684bac4d83418e2035ea6cc1ec765e77204b443400f8427f5b6d60ea9be361fb28c83038d01bef3c8b26a41749ae4bd7e1e4d24e7e8bb21c9ac405b"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2}, @generic="a1fb0d37126464a741", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x583}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x62, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @nested={0x4, 0x89}, @nested={0x25c, 0x53, 0x0, 0x1, [@generic="34d020818da042ad3cc15be6e05536f9ebf09a9913d648bd402eabab58fc9dd07d7d84bedff47e48b16e3119171c45bf9b09942fca", @generic="d7a7086d6ec1e432e6683dd2de75f3b5243a616b96f45041da6891aa5faf75a9440bfd06a740f94ac21a1670c0ae1360c05d72614f5e741cf585379222c7d4984394783fbf9956c9cec1c63071b32c0aefa0423e97374cb7f46ec97ff45c298451e5d10eb681191dd6d16b179cd875742656f99e7d19034cbca70d5a", @generic="4a13b00852f2b223c839db04e4b5876fd7328f9f565c51ecbb4f12eb0c4c3fc670427227bd7426ace06f41bb3bb1e9ac816c700b4a007119d7545c12a656a174d18a57dfe19ca9b0d9a3d6174d01470216a111ad690e2e0b27debe7f9484a3a10d1f7f48f10d641b5bf345a93b854a2b38335f5c3cf30241491dd0c8b7cd0f7833be6029f9dc914c03342629042cd3023958c6c1ccbd0a634b8d7a6c8730dd46426301865c576ea174e517934889731a5cb76e439ede2377ebeee2f729aec3d3d82f984956d352", @generic="f946ebcb1f8ec1952690e21ae49da9a9536fd3eff6e7a36194e380232323bab769f54ef4d788765b14ea147f6b5cf69897fd036d21923a4c5a6edca1dbbfd06b840cf5cda1400b8a22343047a8883271f8112397420a7365344e921f0ebc2e2fe9f6a98a6a8deb572b2d4987206707ad499bbce8d3bc3cc504b7ae943eb4a9b8f82057aff89c81089cbb4489dd08506711292197b73046b6834ef72bca15499a7e65bf70f20d561e9289dd87dc1f9bad96d6a3ab9c6f9adb28f0841ac2db815fd14b8972b506053b1dcd028871f68e422a25afe2a7cd0fc189978ab97a3f981b"]}]}, 0x444}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:30 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f80000001a000001000000000000000000000000000000000000ffffac141400e000000200000000000000000000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f00000000fd0000000000000000003c3a4a9bce16f70c733932e65304d23c000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000007000000000000000000000000000000000000000a00000800"/176], 0xf8}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0xc, 0x0, 0x0) r4 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r3}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x6, 0x6}}, './file0\x00'}) syz_io_uring_submit(r8, r1, &(0x7f0000000500)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xe52c) fork() 12:14:30 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000240)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:30 executing program 3: r0 = syz_io_uring_setup(0x69b1, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x1, 0x323}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fork() 12:14:47 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:47 executing program 0: r0 = syz_io_uring_setup(0x3a8b, &(0x7f0000000100)={0x0, 0x38b1, 0x0, 0x2, 0x387}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000011c0), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r1, &(0x7f00000010c0)=""/224) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) fork() 12:14:47 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac145e15e8ac781400e000000200000002000000000000000000000000000000000000009e6ebaf4803f7c4090349ce2d3181882b1e4f876c2f5f6511cdb7fa23bd7927552b57f5f71cea09ed8d99ed69ff279f18d54b2ab077f287a1d75b0127898d51a6bedffcd69a26ba68c2232fd869878c3", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:47 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867f, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@delsa={0x14c, 0x11, 0x100, 0x70bd2b, 0x25dfdbfe, {@in=@remote, 0x4d4, 0x2, 0x6c}, [@sa={0xe4, 0x6, {{@in=@broadcast, @in=@empty, 0x4e22, 0x960, 0x4e24, 0x0, 0xa, 0x60, 0x80, 0x5e, r4, r5}, {@in6=@empty, 0x4d4, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x6, 0x9, 0x7, 0xfff, 0x7fff, 0x200, 0x0, 0x63103969}, {0x81, 0x8, 0x3, 0xdd44}, {0x4, 0x6a, 0xb56e}, 0x70bd2c, 0x0, 0xa, 0x0, 0x6, 0x40}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x2}}, @mark={0xc, 0x15, {0x35075c, 0x1f}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20010050}, 0x48088) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x125080, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000600)=""/134) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r4 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000008, r4) 12:14:47 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 36) 12:14:47 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000010c0)='\x00\'e\xec\xa1\x96\x00\xd0\xa9\xda\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1\xc1\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7%\x88}\x80\x1e\a\xf7\x1c\x90hjSsI\x8dyz\x1c\xb6\xe5\xb9', 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001140), 0x40100, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xc197afa93aa14f2a}, 0xc, &(0x7f0000001640)={&(0x7f00000011c0)={0x444, 0x3d, 0x100, 0x70bd27, 0x25dfdbfb, {0x1f}, [@nested={0x191, 0x73, 0x0, 0x1, [@generic="fd8895e63d9baf9416bcdc0599992d377b70be4fb918cabde061938e5138303b716112f8b21d713b947a7d6b9db53dd84483048a2c55e40f9eab6603c1ea25fb604f7195759e3d43d7c85253c5b5063676b90f79162bb7d846bea818a3d1408d4d7c87db3b7676627d26224a4bff741f062bff68d4796ca600ea02d8bc174b69911610b4c1699720ef3c6b470168556f493a077b1cfbf2dbdfb9e994cad7832fd022", @generic="d75702c1249ba70325383e651f6aa889af73021600cb714286952684c624fa5ab8a1ec3655f0761f2d9047aa45ab4c524a320f3083b576aebbc8c27a30bd758a1f70fc088fe2dcef19c34f9ca1665b9303495effd14eaddc4cfbebd7ad24a43d2bb6df146be60e2a37a0d87c37f1a420dd133d0224c5ced8ebe47102fa0bc403c0b438fcc6ecfde3fb69db250452e085ae0cbf85", @generic="a4423ee48beb6e0074878475e32b4cd7c3044270b4dbdd7bc02b985684bac4d83418e2035ea6cc1ec765e77204b443400f8427f5b6d60ea9be361fb28c83038d01bef3c8b26a41749ae4bd7e1e4d24e7e8bb21c9ac405b"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2}, @generic="a1fb0d37126464a741", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x583}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x62, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @nested={0x4, 0x89}, @nested={0x25c, 0x53, 0x0, 0x1, [@generic="34d020818da042ad3cc15be6e05536f9ebf09a9913d648bd402eabab58fc9dd07d7d84bedff47e48b16e3119171c45bf9b09942fca", @generic="d7a7086d6ec1e432e6683dd2de75f3b5243a616b96f45041da6891aa5faf75a9440bfd06a740f94ac21a1670c0ae1360c05d72614f5e741cf585379222c7d4984394783fbf9956c9cec1c63071b32c0aefa0423e97374cb7f46ec97ff45c298451e5d10eb681191dd6d16b179cd875742656f99e7d19034cbca70d5a", @generic="4a13b00852f2b223c839db04e4b5876fd7328f9f565c51ecbb4f12eb0c4c3fc670427227bd7426ace06f41bb3bb1e9ac816c700b4a007119d7545c12a656a174d18a57dfe19ca9b0d9a3d6174d01470216a111ad690e2e0b27debe7f9484a3a10d1f7f48f10d641b5bf345a93b854a2b38335f5c3cf30241491dd0c8b7cd0f7833be6029f9dc914c03342629042cd3023958c6c1ccbd0a634b8d7a6c8730dd46426301865c576ea174e517934889731a5cb76e439ede2377ebeee2f729aec3d3d82f984956d352", @generic="f946ebcb1f8ec1952690e21ae49da9a9536fd3eff6e7a36194e380232323bab769f54ef4d788765b14ea147f6b5cf69897fd036d21923a4c5a6edca1dbbfd06b840cf5cda1400b8a22343047a8883271f8112397420a7365344e921f0ebc2e2fe9f6a98a6a8deb572b2d4987206707ad499bbce8d3bc3cc504b7ae943eb4a9b8f82057aff89c81089cbb4489dd08506711292197b73046b6834ef72bca15499a7e65bf70f20d561e9289dd87dc1f9bad96d6a3ab9c6f9adb28f0841ac2db815fd14b8972b506053b1dcd028871f68e422a25afe2a7cd0fc189978ab97a3f981b"]}]}, 0x444}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:47 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2903000000000000000005", @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000884}, 0x8088) fork() [ 1809.994679] FAULT_INJECTION: forcing a failure. [ 1809.994679] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.996668] CPU: 0 PID: 27848 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1809.997801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1809.999132] Call Trace: [ 1809.999563] dump_stack+0x107/0x167 [ 1810.000154] should_fail.cold+0x5/0xa [ 1810.000768] ? create_object.isra.0+0x3a/0xa20 [ 1810.001529] should_failslab+0x5/0x20 [ 1810.002141] kmem_cache_alloc+0x5b/0x310 [ 1810.002805] create_object.isra.0+0x3a/0xa20 [ 1810.003500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1810.004285] kmem_cache_alloc+0x159/0x310 [ 1810.004957] anon_vma_fork+0x1ff/0x640 [ 1810.005608] copy_process+0x7218/0x7800 [ 1810.006248] ? __cleanup_sighand+0xb0/0xb0 [ 1810.006924] ? find_held_lock+0x2c/0x110 [ 1810.007580] kernel_clone+0xe7/0x980 [ 1810.008162] ? lock_downgrade+0x6d0/0x6d0 [ 1810.008824] ? find_held_lock+0x2c/0x110 [ 1810.009494] ? create_io_thread+0xf0/0xf0 [ 1810.010130] ? ksys_write+0x12d/0x260 [ 1810.010748] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1810.011524] __do_sys_fork+0x8a/0xc0 [ 1810.012100] ? kernel_thread+0xf0/0xf0 [ 1810.012730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.013582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.014359] ? trace_hardirqs_on+0x5b/0x180 [ 1810.015062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.015847] do_syscall_64+0x33/0x40 [ 1810.016423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.017247] RIP: 0033:0x7fd58bf37b19 [ 1810.017838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.020709] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1810.021907] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1810.023012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1810.024110] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.025232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.026334] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1810.057918] loop0: detected capacity change from 0 to 2103296 [ 1810.070993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:14:47 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 37) [ 1810.246052] FAULT_INJECTION: forcing a failure. [ 1810.246052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1810.247962] CPU: 0 PID: 28143 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1810.248965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1810.250160] Call Trace: [ 1810.250529] dump_stack+0x107/0x167 [ 1810.251036] should_fail.cold+0x5/0xa [ 1810.251571] __alloc_pages_nodemask+0x182/0x600 [ 1810.252214] ? __lockdep_reset_lock+0x180/0x180 [ 1810.252868] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1810.253715] ? copy_page_range+0x28e1/0x3810 [ 1810.254329] alloc_pages_current+0x187/0x280 [ 1810.254942] get_zeroed_page+0x14/0xb0 [ 1810.255483] __pud_alloc+0x33/0x270 [ 1810.255990] copy_page_range+0x2ca1/0x3810 [ 1810.256586] ? perf_trace_lock+0xac/0x490 [ 1810.257176] ? lock_chain_count+0x20/0x20 [ 1810.257759] ? lock_downgrade+0x6d0/0x6d0 [ 1810.258335] ? up_write+0x191/0x550 [ 1810.258833] ? vm_iomap_memory+0x190/0x190 [ 1810.259419] ? downgrade_write+0x3a0/0x3a0 [ 1810.260001] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1810.260743] ? __vma_link_rb+0x540/0x700 [ 1810.261316] copy_process+0x759b/0x7800 [ 1810.261893] ? __cleanup_sighand+0xb0/0xb0 [ 1810.262488] ? find_held_lock+0x2c/0x110 [ 1810.263049] kernel_clone+0xe7/0x980 [ 1810.263565] ? lock_downgrade+0x6d0/0x6d0 [ 1810.264127] ? find_held_lock+0x2c/0x110 [ 1810.264695] ? create_io_thread+0xf0/0xf0 [ 1810.265279] ? ksys_write+0x12d/0x260 [ 1810.265806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1810.266495] __do_sys_fork+0x8a/0xc0 [ 1810.267002] ? kernel_thread+0xf0/0xf0 [ 1810.267554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1810.268273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.268989] ? trace_hardirqs_on+0x5b/0x180 [ 1810.269586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1810.270288] do_syscall_64+0x33/0x40 [ 1810.270795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1810.271513] RIP: 0033:0x7fd58bf37b19 [ 1810.272013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1810.274580] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1810.275630] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1810.276613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1810.277626] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1810.278627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.279617] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:14:47 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1) r4 = io_uring_setup(0x3a6b, &(0x7f0000000600)={0x0, 0xd7f8, 0x0, 0x1, 0x398, 0x0, r1}) fcntl$dupfd(r3, 0x0, r4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a0ecaceef8c1cafc0000001add9e000000000000000000fe880000005400000000000000f7010001000002000000000001000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc020000000000000000000000000001000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000700000028bd7000000000000a00040800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:14:47 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum, 0x0, @desc4}) sendfile(r2, r2, &(0x7f00000011c0)=0x5, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/214}, {&(0x7f0000000280)=""/147}, {&(0x7f0000000000)=""/10}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_dev$hidraw(&(0x7f00000010c0), 0x7, 0x101080) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001140)={0x6, 0x0, &(0x7f0000001100)=[r4]}, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r5, @ANYRES64]) write$vga_arbiter(r1, &(0x7f0000001180)=@other={'unlock', ' ', 'mem'}, 0xb) r6 = syz_open_dev$mouse(&(0x7f0000000200), 0x8, 0x119501) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00', 0x5) 12:15:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 38) 12:15:00 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x4a7, 0x4, 0x0, 0xf1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) syz_io_uring_setup(0x4f28, &(0x7f0000000240)={0x0, 0xb9bb, 0x2, 0x1, 0x3a8, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:00 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="c9776b6481ee5118000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) open_by_handle_at(r2, &(0x7f0000000280)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x1, 0x7, 0x306, 0xc0000000, 0x7, 0x9}}, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xc}, 0x10000, 0x0, 0x460, 0x0, 0x0, 0x7, 0x101, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fork() 12:15:00 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x50, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r1, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7d) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200000000000c14df00"/67, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:00 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:00 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) pkey_mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000000, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r0) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') rt_tgsigqueueinfo(r2, r2, 0xffffffff, &(0x7f0000000000)={0x0, 0xfffffffe}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:15:00 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xffffffff}, 0x80, &(0x7f0000000840)}, 0x0, 0x4000000}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f000093e000/0x4000)=nil, 0x4000, 0x3000005, 0x10, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0xa0, 0x240000, 0x23456}, 0x3f) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) clone3(&(0x7f0000000640)={0x10000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000480)=0x0, {0x33}, &(0x7f00000004c0)=""/81, 0x51, &(0x7f0000000540)=""/32, &(0x7f0000000600)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405e, 0xc3002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff2d4, 0x0, @perf_config_ext, 0x42071, 0xfffffffffffffffc, 0x460, 0x3, 0x0, 0x7, 0x0, 0x0, 0x8a}, r7, 0x0, 0xffffffffffffffff, 0x1) fork() syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r8 = getpgrp(0x0) ptrace(0x10, r8) kcmp(0x0, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x4f69, &(0x7f0000000780)={0x0, 0x3af, 0x4, 0x0, 0x119, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000800), &(0x7f00000008c0)) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0xff, 0x9, 0x46, 0x0, 0x0, 0x9a65, 0xc3047, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x2, @perf_bp={&(0x7f00000006c0)}, 0x10000, 0x7, 0x3, 0x1, 0x9, 0x0, 0x8, 0x0, 0x7fff, 0x0, 0x704}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) 12:15:00 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000010c0)='\x00\'e\xec\xa1\x96\x00\xd0\xa9\xda\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1\xc1\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7%\x88}\x80\x1e\a\xf7\x1c\x90hjSsI\x8dyz\x1c\xb6\xe5\xb9', 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001140), 0x40100, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xc197afa93aa14f2a}, 0xc, &(0x7f0000001640)={&(0x7f00000011c0)={0x444, 0x3d, 0x100, 0x70bd27, 0x25dfdbfb, {0x1f}, [@nested={0x191, 0x73, 0x0, 0x1, [@generic="fd8895e63d9baf9416bcdc0599992d377b70be4fb918cabde061938e5138303b716112f8b21d713b947a7d6b9db53dd84483048a2c55e40f9eab6603c1ea25fb604f7195759e3d43d7c85253c5b5063676b90f79162bb7d846bea818a3d1408d4d7c87db3b7676627d26224a4bff741f062bff68d4796ca600ea02d8bc174b69911610b4c1699720ef3c6b470168556f493a077b1cfbf2dbdfb9e994cad7832fd022", @generic="d75702c1249ba70325383e651f6aa889af73021600cb714286952684c624fa5ab8a1ec3655f0761f2d9047aa45ab4c524a320f3083b576aebbc8c27a30bd758a1f70fc088fe2dcef19c34f9ca1665b9303495effd14eaddc4cfbebd7ad24a43d2bb6df146be60e2a37a0d87c37f1a420dd133d0224c5ced8ebe47102fa0bc403c0b438fcc6ecfde3fb69db250452e085ae0cbf85", @generic="a4423ee48beb6e0074878475e32b4cd7c3044270b4dbdd7bc02b985684bac4d83418e2035ea6cc1ec765e77204b443400f8427f5b6d60ea9be361fb28c83038d01bef3c8b26a41749ae4bd7e1e4d24e7e8bb21c9ac405b"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2}, @generic="a1fb0d37126464a741", @typed={0x8, 0x23, 0x0, 0x0, @u32=0x583}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x62, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @nested={0x4, 0x89}, @nested={0x25c, 0x53, 0x0, 0x1, [@generic="34d020818da042ad3cc15be6e05536f9ebf09a9913d648bd402eabab58fc9dd07d7d84bedff47e48b16e3119171c45bf9b09942fca", @generic="d7a7086d6ec1e432e6683dd2de75f3b5243a616b96f45041da6891aa5faf75a9440bfd06a740f94ac21a1670c0ae1360c05d72614f5e741cf585379222c7d4984394783fbf9956c9cec1c63071b32c0aefa0423e97374cb7f46ec97ff45c298451e5d10eb681191dd6d16b179cd875742656f99e7d19034cbca70d5a", @generic="4a13b00852f2b223c839db04e4b5876fd7328f9f565c51ecbb4f12eb0c4c3fc670427227bd7426ace06f41bb3bb1e9ac816c700b4a007119d7545c12a656a174d18a57dfe19ca9b0d9a3d6174d01470216a111ad690e2e0b27debe7f9484a3a10d1f7f48f10d641b5bf345a93b854a2b38335f5c3cf30241491dd0c8b7cd0f7833be6029f9dc914c03342629042cd3023958c6c1ccbd0a634b8d7a6c8730dd46426301865c576ea174e517934889731a5cb76e439ede2377ebeee2f729aec3d3d82f984956d352", @generic="f946ebcb1f8ec1952690e21ae49da9a9536fd3eff6e7a36194e380232323bab769f54ef4d788765b14ea147f6b5cf69897fd036d21923a4c5a6edca1dbbfd06b840cf5cda1400b8a22343047a8883271f8112397420a7365344e921f0ebc2e2fe9f6a98a6a8deb572b2d4987206707ad499bbce8d3bc3cc504b7ae943eb4a9b8f82057aff89c81089cbb4489dd08506711292197b73046b6834ef72bca15499a7e65bf70f20d561e9289dd87dc1f9bad96d6a3ab9c6f9adb28f0841ac2db815fd14b8972b506053b1dcd028871f68e422a25afe2a7cd0fc189978ab97a3f981b"]}]}, 0x444}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1822.871420] FAULT_INJECTION: forcing a failure. [ 1822.871420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1822.873007] CPU: 1 PID: 28688 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1822.873922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1822.874935] Call Trace: [ 1822.875280] dump_stack+0x107/0x167 [ 1822.875752] should_fail.cold+0x5/0xa [ 1822.876252] __alloc_pages_nodemask+0x182/0x600 [ 1822.876852] ? lock_acquire+0x197/0x470 [ 1822.877373] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1822.878151] ? lock_downgrade+0x6d0/0x6d0 [ 1822.878686] ? do_raw_spin_lock+0x121/0x260 [ 1822.879263] alloc_pages_current+0x187/0x280 [ 1822.879864] __pmd_alloc+0x37/0x5e0 [ 1822.880371] copy_page_range+0x2bd8/0x3810 [ 1822.880943] ? perf_trace_lock+0xac/0x490 [ 1822.881505] ? lock_chain_count+0x20/0x20 [ 1822.882088] ? up_write+0x191/0x550 [ 1822.882577] ? vm_iomap_memory+0x190/0x190 [ 1822.883135] ? downgrade_write+0x3a0/0x3a0 [ 1822.883682] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1822.884407] ? __vma_link_rb+0x540/0x700 [ 1822.884951] copy_process+0x759b/0x7800 [ 1822.885490] ? __cleanup_sighand+0xb0/0xb0 [ 1822.886059] ? find_held_lock+0x2c/0x110 [ 1822.886602] kernel_clone+0xe7/0x980 [ 1822.887084] ? lock_downgrade+0x6d0/0x6d0 [ 1822.887614] ? find_held_lock+0x2c/0x110 [ 1822.888159] ? create_io_thread+0xf0/0xf0 [ 1822.888712] ? ksys_write+0x12d/0x260 [ 1822.889242] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1822.889868] __do_sys_fork+0x8a/0xc0 [ 1822.890354] ? kernel_thread+0xf0/0xf0 [ 1822.890879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1822.891577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1822.892271] ? trace_hardirqs_on+0x5b/0x180 [ 1822.892831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1822.893531] do_syscall_64+0x33/0x40 [ 1822.894008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1822.894688] RIP: 0033:0x7fd58bf37b19 [ 1822.895184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1822.897554] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1822.898550] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1822.899509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1822.900417] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1822.901380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1822.902318] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1822.902554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:15:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 39) 12:15:00 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_enter(r2, 0x520, 0xf942, 0x0, &(0x7f0000000380)={[0x1]}, 0x8) fork() [ 1823.023551] FAULT_INJECTION: forcing a failure. [ 1823.023551] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.025320] CPU: 1 PID: 28889 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1823.026172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.027174] Call Trace: [ 1823.027500] dump_stack+0x107/0x167 [ 1823.027947] should_fail.cold+0x5/0xa [ 1823.028424] ? create_object.isra.0+0x3a/0xa20 [ 1823.028980] should_failslab+0x5/0x20 [ 1823.029452] kmem_cache_alloc+0x5b/0x310 [ 1823.029948] create_object.isra.0+0x3a/0xa20 [ 1823.030477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.031092] kmem_cache_alloc+0x159/0x310 [ 1823.031601] anon_vma_fork+0x1ff/0x640 [ 1823.032076] copy_process+0x7218/0x7800 [ 1823.032555] ? __cleanup_sighand+0xb0/0xb0 [ 1823.033081] ? find_held_lock+0x2c/0x110 [ 1823.033586] kernel_clone+0xe7/0x980 [ 1823.034041] ? lock_downgrade+0x6d0/0x6d0 [ 1823.034549] ? find_held_lock+0x2c/0x110 [ 1823.035045] ? create_io_thread+0xf0/0xf0 [ 1823.035564] ? ksys_write+0x12d/0x260 [ 1823.036035] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1823.036627] __do_sys_fork+0x8a/0xc0 [ 1823.037078] ? kernel_thread+0xf0/0xf0 [ 1823.037547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.038182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.038809] ? trace_hardirqs_on+0x5b/0x180 [ 1823.039334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.039960] do_syscall_64+0x33/0x40 [ 1823.040412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.041035] RIP: 0033:0x7fd58bf37b19 [ 1823.041490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.043726] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1823.044642] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1823.045467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1823.046281] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.047098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.047905] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:00 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0xfdfa, 0x20, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1823.145901] loop7: detected capacity change from 0 to 2103296 12:15:00 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x2e, &(0x7f0000000000)={0x7, 0x1ff, 0x3}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:15:00 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2903000000000000000005", @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000884}, 0x8088) fork() 12:15:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 40) [ 1823.305696] FAULT_INJECTION: forcing a failure. [ 1823.305696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1823.307352] CPU: 1 PID: 29369 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1823.308139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.309081] Call Trace: [ 1823.309394] dump_stack+0x107/0x167 [ 1823.309808] should_fail.cold+0x5/0xa [ 1823.310245] __alloc_pages_nodemask+0x182/0x600 [ 1823.310772] ? __lockdep_reset_lock+0x180/0x180 [ 1823.311307] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1823.311999] ? copy_page_range+0x28e1/0x3810 [ 1823.312503] alloc_pages_current+0x187/0x280 [ 1823.313016] get_zeroed_page+0x14/0xb0 [ 1823.313469] __pud_alloc+0x33/0x270 [ 1823.313891] copy_page_range+0x2ca1/0x3810 [ 1823.314366] ? perf_trace_lock+0xac/0x490 [ 1823.314817] ? lock_chain_count+0x20/0x20 [ 1823.315276] ? lock_downgrade+0x6d0/0x6d0 [ 1823.315736] ? up_write+0x191/0x550 [ 1823.316149] ? vm_iomap_memory+0x190/0x190 [ 1823.316631] ? downgrade_write+0x3a0/0x3a0 [ 1823.317112] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1823.317741] ? __vma_link_rb+0x540/0x700 [ 1823.318216] copy_process+0x759b/0x7800 [ 1823.318697] ? __cleanup_sighand+0xb0/0xb0 [ 1823.319187] ? finish_task_switch+0x126/0x5d0 [ 1823.319673] kernel_clone+0xe7/0x980 [ 1823.320097] ? create_io_thread+0xf0/0xf0 [ 1823.320547] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1823.321058] ? trace_hardirqs_on+0x5b/0x180 [ 1823.321558] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1823.322062] ? finish_task_switch+0x126/0x5d0 [ 1823.322567] ? finish_task_switch+0xef/0x5d0 [ 1823.323052] ? __switch_to+0x572/0xf70 [ 1823.323502] ? __switch_to_asm+0x3a/0x60 [ 1823.323946] ? __switch_to_asm+0x34/0x60 [ 1823.324413] ? __schedule+0x82c/0x1ea0 [ 1823.324859] __do_sys_fork+0x8a/0xc0 [ 1823.325305] ? kernel_thread+0xf0/0xf0 [ 1823.325734] ? io_schedule_timeout+0x140/0x140 [ 1823.326261] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1823.326771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.327370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.327954] ? trace_hardirqs_on+0x5b/0x180 [ 1823.328441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.329025] do_syscall_64+0x33/0x40 [ 1823.329456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.330034] RIP: 0033:0x7fd58bf37b19 [ 1823.330444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.332530] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1823.333409] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1823.334177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1823.334950] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.335766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.336544] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:00 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x25dfdbfc, {{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0xff}, @in6=@private1, {}, {}, {0x100}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000600)={0xf, 0x3, {0x401, @usage=0x7f, 0x0, 0x7, 0x5, 0x8001, 0x4, 0x2, 0x8, @usage=0x3, 0x40, 0x20, [0x200, 0x0, 0x5, 0x8, 0x6]}, {0x1, @usage=0x401, 0x0, 0x5, 0x0, 0x200, 0x7, 0x800, 0x1, @struct={0x0, 0x7fffffff}, 0x0, 0x7fffffff, [0x10000, 0x5, 0xfff, 0xf16, 0x2, 0x3]}, {0x9, @struct={0x8000, 0x1}, 0x0, 0x6, 0x100000000, 0xffff, 0x5, 0x2, 0x35, @usage=0xf5, 0xff, 0x2, [0x913f, 0x78, 0xf6, 0x7ff, 0x0, 0xffffffffffffc9d9]}, {0x80, 0xd9, 0x5}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a00)={r3, 0x2, 0x66, 0x1}) [ 1823.350988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 12:15:00 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0xcd66840e231a564a, 0x80, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_config_ext={0x2f7, 0xe032}, 0x0, 0x8, 0x468, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x8) fork() 12:15:00 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) ioctl$KDMKTONE(r2, 0x4b30, 0x400) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x6) fork() 12:15:00 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 41) 12:15:00 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$hidraw(r1, &(0x7f0000000240)="4793992e35d0c28c46a0c7ae3c3bdfdef48d4c42bffdac4c71411d06a6663f5dda2ba2abe1b6959a05a996afcd50bb0a8acf0c985a3d1fa97ddacb1d018df9b1d2d67c379cda260944b9db8505cfcfe38b554ff7be8355f1e430b9b0c7a2b681fec576cf78118c17a520a5595b873549ce810e098d25aa2a86fd0c5c6aa343612dc8b370c53d84784911eb44ec101d13e6356a76d4313a79f0b34f2c", 0x9c) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/66, 0x42}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1823.524697] FAULT_INJECTION: forcing a failure. [ 1823.524697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1823.528461] CPU: 0 PID: 29635 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1823.530124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.532102] Call Trace: [ 1823.532738] dump_stack+0x107/0x167 [ 1823.533618] should_fail.cold+0x5/0xa [ 1823.534534] __alloc_pages_nodemask+0x182/0x600 [ 1823.535652] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1823.537068] ? find_held_lock+0x2c/0x110 [ 1823.538175] ? __pmd_alloc+0x2db/0x5e0 [ 1823.539087] ? lock_downgrade+0x6d0/0x6d0 [ 1823.540060] ? do_raw_spin_lock+0x121/0x260 [ 1823.541082] alloc_pages_current+0x187/0x280 [ 1823.542147] pte_alloc_one+0x16/0x1a0 [ 1823.543049] __pte_alloc+0x1d/0x330 [ 1823.543923] copy_page_range+0x1b62/0x3810 [ 1823.544923] ? perf_trace_lock+0xac/0x490 [ 1823.545913] ? lock_chain_count+0x20/0x20 [ 1823.546948] ? up_write+0x191/0x550 [ 1823.547814] ? vm_iomap_memory+0x190/0x190 [ 1823.548827] ? downgrade_write+0x3a0/0x3a0 [ 1823.549844] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1823.551123] ? __vma_link_rb+0x540/0x700 [ 1823.552088] copy_process+0x759b/0x7800 [ 1823.553060] ? __cleanup_sighand+0xb0/0xb0 [ 1823.554114] ? find_held_lock+0x2c/0x110 [ 1823.555075] kernel_clone+0xe7/0x980 [ 1823.556074] ? lock_downgrade+0x6d0/0x6d0 [ 1823.557025] ? find_held_lock+0x2c/0x110 [ 1823.558129] ? create_io_thread+0xf0/0xf0 [ 1823.559086] ? ksys_write+0x12d/0x260 [ 1823.560110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1823.561228] __do_sys_fork+0x8a/0xc0 [ 1823.562234] ? kernel_thread+0xf0/0xf0 [ 1823.563169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.564587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.565784] ? trace_hardirqs_on+0x5b/0x180 [ 1823.566956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.568141] do_syscall_64+0x33/0x40 [ 1823.569146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.570370] RIP: 0033:0x7fd58bf37b19 [ 1823.571400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.575603] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1823.577355] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1823.578989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1823.580621] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.582276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.583924] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:15 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 42) 12:15:15 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_alloc(0x0, 0x90aaaccb3b8439b3) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006, r1) 12:15:15 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x2, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() syz_io_uring_setup(0x2ab1, &(0x7f0000000240)={0x0, 0xd293, 0x1, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r4 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0xc, 0x0, 0x0) r5 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r4}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r10}}, 0x1000) syz_io_uring_submit(r3, r7, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r10}}, 0x5de) syz_io_uring_submit(r2, r1, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x6, 0x0, 0x6}, 0x0) 12:15:15 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x281, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) dup2(r3, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3722, &(0x7f0000000500)={0x0, 0x329, 0x1, 0x0, 0x331}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') fork() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r5, 0x10000000) 12:15:15 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, r3, 0x8000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x156e, &(0x7f00000010c0)={0x0, 0x4f78, 0x4, 0x0, 0x16f, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000001140)=0x0, &(0x7f0000001180)) syz_io_uring_submit(r5, r2, &(0x7f00000011c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x5481}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:15 executing program 6: r0 = syz_io_uring_setup(0x3a8b, &(0x7f0000000100)={0x0, 0x38b1, 0x0, 0x2, 0x387}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000011c0), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r1, &(0x7f00000010c0)=""/224) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) fork() 12:15:15 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f0000000380)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r8, 0x5423, 0xffffffffffffffe0) ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f00000002c0)={0x4, &(0x7f0000000780)=[{0x7fffffff, 0x6c, &(0x7f0000000240)="5a051863597c6c9621edea431472350e418935e9737bb76873106bbae5b52cb1f0704e954527811db69c374405c238f3b7ce800ff5f28fa5d0b470d4797247e8d00f57ff1cf90f59719e4a259085b17693a9d9d80a1b677435b990c98ec9ac5bc19e23e9d26c9a5f7e08af4f", 0x0, 0x1}, {0x200, 0x78, &(0x7f0000000500)="5247449b86b734cb7ec9d3a9e07ee110ce2d533c090ebe60256138a82a25d5804ea02c98a2dd7b6f65e484dc76758ed29a2e69cd9785fa40168e486e2570d0d23fbe363031f53a2fc9e27a313f9297fff6ea37f766bb993d6e9d56d578348f0c3b573ee3c508679cec76ccfd7494011dab9b39a4313d30e0", 0x1, 0x1}, {0x0, 0x68, &(0x7f0000000600)="9faad253ad3e63a292ef87ceabef1892402e320dfad0040258e4abbf6a92b433dcbb98fc3625b001468fa134ae693b4c62ad2bc7df09ae71626e5b82c28163058fdf323744cee1153a37280a81fe9b379f27b15fa34f6f224dc111a9aacacbaff607f62760f0b465"}, {0x7fff, 0xe1, &(0x7f0000000680)="31f0b0282395429de9b4ee0c63e328b1446d3155bc4469b30967820515c0cd27b91b1f38a4a990427c0c3d3999ac3adbe4b6e5b2d74fda873ae8f1e49bc078b5f2a73d60511e38ef4c2d5b27dc8c1b17fab29ef58883fa3dfa62c65290114634bb76484d1883f449b17405316fa783a2ba60cc69c3063dd4eb1c8a44a0039f0f38d1d50b788ef8935c1b41a197949eccaf37a96becc093103d5019e337b22bd3b0f8348387f6709d831a3fb84dd53731122194c7c95a68593e27933865bd5fa461b80e33d87d6524cf32d24e76ca16e6442308cba4e406454ab8ef2c3e496a5f69"}]}) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:15 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) splice(0xffffffffffffffff, &(0x7f0000000380), r2, &(0x7f0000000500)=0x35ae, 0x8, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000540)) fork() [ 1838.416588] FAULT_INJECTION: forcing a failure. [ 1838.416588] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.419519] CPU: 1 PID: 30054 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1838.421285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.423095] Call Trace: [ 1838.423802] dump_stack+0x107/0x167 [ 1838.424663] should_fail.cold+0x5/0xa [ 1838.425680] ? ptlock_alloc+0x1d/0x70 [ 1838.426506] should_failslab+0x5/0x20 [ 1838.427340] kmem_cache_alloc+0x5b/0x310 [ 1838.428396] ptlock_alloc+0x1d/0x70 [ 1838.429189] pte_alloc_one+0x68/0x1a0 [ 1838.430225] __pte_alloc+0x1d/0x330 [ 1838.431031] copy_page_range+0x1b62/0x3810 [ 1838.432136] ? perf_trace_lock+0xac/0x490 [ 1838.433093] ? lock_chain_count+0x20/0x20 [ 1838.434213] ? up_write+0x191/0x550 [ 1838.435009] ? vm_iomap_memory+0x190/0x190 [ 1838.436118] ? downgrade_write+0x3a0/0x3a0 [ 1838.437043] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1838.438475] ? __vma_link_rb+0x540/0x700 [ 1838.439425] copy_process+0x759b/0x7800 [ 1838.440521] ? __cleanup_sighand+0xb0/0xb0 [ 1838.441458] ? find_held_lock+0x2c/0x110 [ 1838.442514] kernel_clone+0xe7/0x980 [ 1838.443380] ? lock_downgrade+0x6d0/0x6d0 [ 1838.444414] ? find_held_lock+0x2c/0x110 [ 1838.445304] ? create_io_thread+0xf0/0xf0 [ 1838.446398] ? ksys_write+0x12d/0x260 [ 1838.447234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1838.448494] __do_sys_fork+0x8a/0xc0 [ 1838.449301] ? kernel_thread+0xf0/0xf0 [ 1838.450344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.451463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.452814] ? trace_hardirqs_on+0x5b/0x180 [ 1838.453765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.455111] do_syscall_64+0x33/0x40 [ 1838.455917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.457259] RIP: 0033:0x7fd58bf37b19 [ 1838.458079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.462857] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1838.464603] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1838.466417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.468288] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.470138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.471762] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1838.480617] loop7: detected capacity change from 0 to 2103296 12:15:15 executing program 6: r0 = syz_io_uring_setup(0x3a8b, &(0x7f0000000100)={0x0, 0x38b1, 0x0, 0x2, 0x387}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000011c0), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r1, &(0x7f00000010c0)=""/224) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) fork() 12:15:15 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 43) [ 1838.766809] FAULT_INJECTION: forcing a failure. [ 1838.766809] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.769690] CPU: 0 PID: 30580 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1838.771258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.773121] Call Trace: [ 1838.773731] dump_stack+0x107/0x167 [ 1838.774558] should_fail.cold+0x5/0xa [ 1838.775415] ? create_object.isra.0+0x3a/0xa20 [ 1838.776457] should_failslab+0x5/0x20 [ 1838.777318] kmem_cache_alloc+0x5b/0x310 [ 1838.778243] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1838.779599] create_object.isra.0+0x3a/0xa20 [ 1838.780582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.781742] kmem_cache_alloc+0x159/0x310 [ 1838.782704] ptlock_alloc+0x1d/0x70 [ 1838.783530] pte_alloc_one+0x68/0x1a0 [ 1838.784388] __pte_alloc+0x1d/0x330 [ 1838.785219] copy_page_range+0x1b62/0x3810 [ 1838.786178] ? perf_trace_lock+0xac/0x490 [ 1838.787107] ? lock_chain_count+0x20/0x20 [ 1838.788076] ? up_write+0x191/0x550 [ 1838.788890] ? vm_iomap_memory+0x190/0x190 [ 1838.789848] ? downgrade_write+0x3a0/0x3a0 [ 1838.790797] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1838.792008] ? __vma_link_rb+0x540/0x700 [ 1838.792921] copy_process+0x759b/0x7800 [ 1838.793871] ? __cleanup_sighand+0xb0/0xb0 [ 1838.794844] ? find_held_lock+0x2c/0x110 [ 1838.795755] kernel_clone+0xe7/0x980 [ 1838.796595] ? lock_downgrade+0x6d0/0x6d0 [ 1838.797535] ? find_held_lock+0x2c/0x110 [ 1838.798446] ? create_io_thread+0xf0/0xf0 [ 1838.799403] ? ksys_write+0x12d/0x260 [ 1838.800283] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1838.801402] __do_sys_fork+0x8a/0xc0 [ 1838.802272] ? kernel_thread+0xf0/0xf0 [ 1838.803180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1838.804396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.805582] ? trace_hardirqs_on+0x5b/0x180 [ 1838.806581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.807781] do_syscall_64+0x33/0x40 [ 1838.808638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1838.809830] RIP: 0033:0x7fd58bf37b19 [ 1838.810688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.814939] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1838.816699] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1838.818350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.819987] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.821632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.823274] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:16 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000500)={0x0, 0x1, "a6"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:16 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x1, 0x39a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a040100000000000000000000000000000000000000ffffe0000001e000000200000000000000000000000000000000000000000000000000000000c4d292e127c718f8e28d7bd00470a5541dc95b84ae9940f35a3f3cf01ddf157fd93aec9db8ed13e5d734cf3373eedb48bfa3131243c495584ae6b602870acb8f62ea5385d542d4bcf1b2271c897304f02d0f62e6c67814197507dd6ebee4b1b59bb91aff14b1be132a5a441b8594b01470a552eb600efee2702ddf483cdfb25a716afe5c7596ed65d425bd2d7555c117bd3c30058e04083b69b7fa8340dee40ee2a8a6a6b26461036d1782", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:16 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/169, 0xa9}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x7, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001900)=""/95, 0x5f}, {&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/51, 0x33}, {&(0x7f0000001a80)}], 0x5}}, {{&(0x7f0000001b40)=@abs, 0x6e, &(0x7f0000004000)=[{&(0x7f0000001bc0)=""/165, 0xa5}, {&(0x7f0000001c80)=""/33, 0x21}, {&(0x7f0000003e00)=""/242, 0xf2}, {&(0x7f0000003f00)=""/255, 0xff}, {&(0x7f0000001cc0)=""/113, 0x71}], 0x5, &(0x7f0000004080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f0000001d40)=""/62, 0x3e}, {&(0x7f0000004180)=""/184, 0xb8}, {&(0x7f0000004240)=""/218, 0xda}, {&(0x7f0000004340)=""/104, 0x68}, {&(0x7f00000043c0)=""/99, 0x63}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/174, 0xae}], 0x7}}, {{&(0x7f0000005580)=@abs, 0x6e, &(0x7f0000006780)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/126, 0x7e}, {&(0x7f0000006680)=""/49, 0x31}, {&(0x7f00000066c0)=""/19, 0x13}, {&(0x7f0000006700)=""/103, 0x67}], 0x5, &(0x7f0000006800)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000654e1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108}}], 0x6, 0x40000000, &(0x7f0000006ac0)={0x0, 0x3938700}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000006b80)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r8, 0x0, &(0x7f0000006b00)="f13d7d370dd1c1dcc4e60990e0fb59d9b88066d617128bb6a80cf296618ef5e98c4052daa70a99c49e0c042753882c3115cf9f5da31007c7809385b903667fe593891d374704816c0526d8", 0x4b, 0x90, 0x0, {0x0, r9}}, 0x80000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64]) r2 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x4243, 0x0, 0x3, 0x399, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r4 = signalfd4(r3, &(0x7f00000010c0)={[0x9]}, 0x8, 0x800) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000001100)={0x7ff, [0x5, 0x57bb], 0x45}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x14, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x2000000000, 0x460, 0x4, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fork() 12:15:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5423, 0xffffffffffffffe0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r1, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x1f, 0x8, 0x70bd27, 0x25dfdbff, {0x11}, [@generic="3830f48777b8942437a7a22a4ae230907c62ee98b5be6735362093258a42b4ac997b5e2d90ccc9af96360349630b378cd1"]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd=r1, 0x8, &(0x7f0000000500)=""/65, 0x41, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) fork() r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0300009a0400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c01}, {&(0x7f0000001080)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="501a010000ff", 0x6, 0x10000}], 0x0, &(0x7f0000001140)=ANY=[]) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) [ 1838.987431] loop0: detected capacity change from 0 to 2103296 12:15:32 executing program 6: r0 = syz_io_uring_setup(0x3a8b, &(0x7f0000000100)={0x0, 0x38b1, 0x0, 0x2, 0x387}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000011c0), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r1, &(0x7f00000010c0)=""/224) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) fork() 12:15:32 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x1, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000007200000000000000000000000000000000000000000000000000000000000000000006000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x40) 12:15:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64]) r2 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x100, 0x399, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x20010, r2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:32 executing program 7: r0 = syz_io_uring_setup(0x68d1, &(0x7f0000000500)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000002200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r3, r4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) fork() ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) io_uring_enter(r6, 0x490f, 0x892d, 0x2, &(0x7f00000003c0)={[0x8]}, 0x8) 12:15:32 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 44) 12:15:32 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x4, 0x0, 0xc6, 0x6, 0x0, 0x4, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x4, 0x80}, 0x80, 0x80000000, 0xfffffffc, 0x4, 0x7ff, 0x101, 0xbe, 0x0, 0x200, 0x0, 0x4}, 0xffffffffffffffff, 0x5, r2, 0x1) 12:15:32 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x802, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x4, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0xb, r1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() r4 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0xb, 0x0, 0x5, 0x5, 0x1}, 0x401) pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, r4) rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:15:32 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4000, @fd_index=0x4, 0x7ff, &(0x7f0000000240)=""/8, 0x8, 0x10}, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) fallocate(r3, 0x20, 0x4, 0x0) fork() [ 1855.408539] FAULT_INJECTION: forcing a failure. [ 1855.408539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1855.410034] CPU: 1 PID: 31196 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1855.410821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1855.411769] Call Trace: [ 1855.412080] dump_stack+0x107/0x167 [ 1855.412504] should_fail.cold+0x5/0xa [ 1855.412942] __alloc_pages_nodemask+0x182/0x600 [ 1855.413472] ? lock_acquire+0x197/0x470 [ 1855.413928] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1855.414613] ? lock_downgrade+0x6d0/0x6d0 [ 1855.415084] ? vm_normal_page+0x162/0x2e0 [ 1855.415558] ? do_raw_spin_lock+0x121/0x260 [ 1855.416053] alloc_pages_vma+0xbb/0x410 [ 1855.416511] copy_page_range+0x1f38/0x3810 [ 1855.417017] ? up_write+0x191/0x550 [ 1855.417436] ? vm_iomap_memory+0x190/0x190 [ 1855.417914] ? downgrade_write+0x3a0/0x3a0 [ 1855.418403] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1855.419018] ? __vma_link_rb+0x540/0x700 [ 1855.419484] copy_process+0x759b/0x7800 [ 1855.419954] ? __cleanup_sighand+0xb0/0xb0 [ 1855.420444] ? find_held_lock+0x2c/0x110 [ 1855.420906] kernel_clone+0xe7/0x980 [ 1855.421328] ? lock_downgrade+0x6d0/0x6d0 [ 1855.421809] ? find_held_lock+0x2c/0x110 [ 1855.422275] ? create_io_thread+0xf0/0xf0 [ 1855.422749] ? ksys_write+0x12d/0x260 [ 1855.423190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1855.423742] __do_sys_fork+0x8a/0xc0 [ 1855.424164] ? kernel_thread+0xf0/0xf0 [ 1855.424623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1855.425219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.425810] ? trace_hardirqs_on+0x5b/0x180 [ 1855.426299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.426891] do_syscall_64+0x33/0x40 [ 1855.427321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1855.427904] RIP: 0033:0x7fd58bf37b19 [ 1855.428334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1855.430419] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1855.431283] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1855.432089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1855.432893] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.433705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.434512] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1855.458476] loop3: detected capacity change from 0 to 2103296 12:15:32 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c00080008000800000000001cb69d4b04d3c3c3276b323f29aa22a523a8362392911be5bbad5e28c42c30e32fcd0ed609abc6"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7762}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x453, 0x8, 0x70bd2b, 0x25dfdbfd, "4dd69b86e025444d3e75ef89fbfcc2cc5ef5f30dd403653cf4c1077b2cbc05e58d07ad08", ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4044890) 12:15:32 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x281, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) dup2(r3, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3722, &(0x7f0000000500)={0x0, 0x329, 0x1, 0x0, 0x331}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') fork() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r5, 0x10000000) 12:15:32 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r0, 0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x2a2f, &(0x7f0000000500)={0x0, 0x7f82, 0x20, 0x0, 0x309, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r3, 0xffffffffffffff7f, 0x0, 0x8a, 0x3}, 0x8000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000c00)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="0d7ddf615d2c1cccd782d450fe962b45923cc523b59b9dde2f6ce3a7d1efffbcf86bbc488ca9be4bc2f8e6423233533ef63d6f0d14ad070a7071e5228a66ee723709e348c4db9afdb4cb775f1b86b40f9b6ec5eeaa2786929d731ac1374d40fdfd35a1ab57367bdc2d34a0755120105a20420a94cf652944b86cc5eace5835", 0x7f}], 0x1, &(0x7f0000000880)=[{0x28, 0x10d, 0xd3, "c522f0e23da50e6ce674b2c8be3eecfc52659639da61b2"}, {0xe0, 0x118, 0x3f, "2888df71d806b9ef372fdc82d15efc7ee7d9a68acf855a2cf0ca384453c90403879e684cc0e3a60416f47679e0a6376d4ed075b5c5bb9383ac5cdd94518ac3e4cb15bcb9eca045bf439099a0e6f63f69b956432bea017e8e664982c637f0db1d8143fa5db9e5753936abf54c2136c48361ff533adf1d63b1975e3bc300291e9abc33383f3362e319ef92d2a90ef4dc8d267c98305b834bcd55ac776d80d403f93afa973cec91ae4dc6764a2742c802fd819b6a03237104beb253f27f8ba01a3b8846741f479a43fe56d896c1d8a6"}, {0xc0, 0x107, 0x80000000, "745a0447637f84bd32c4c8308f1a4279e4c45a832b39703d1e6ec6a59230f3f46c4912c3c00077e450112582c5f26130fba1db05f53ca940d0f6b60e5e4b62cfe0ab69664fae61aab9ddaa515696c36fbe336ef8753bec6ec93cc7b9640966e1ca37c8e4f21aaeb991f66efeed4c5313bd52f3a2298667a396f7b79de0e23e9e23d0ec9bd5b94b4a0fa156fa16d76bdca86f6ae854245c1152df6afad9d6a4f1ba22c3b16ba15557bc1cb40bd449"}, {0xc0, 0x115, 0xfffffffd, "a4bb2954af2e736b91e6f99309b86c5de2fd06124dd14d93d9d6ffe281d89c57c359b96931211674e153885a3fc2a55105a101a070a25925e27f479885f7d1d21dde935c3be5980ac915169ce0b81e956c235e71b516d638db48777f6d63cd820e5ec5e55a91a2946b79691e99ff5fe846f55942064ab52cba8a10c0f5a2233c868d02b0fa93d6821cb2362538473e0f351ffac7cb114d9d38e065e9fe74982510c1481895dc62d5d5f890e8"}, {0xd8, 0x88, 0x7, "a5cdc7892d7a2cf50f6bbe778211e8bdcbcb4b8f2f71510f46156efd708d18121b20f42ee819bc92f2d4df27b12606a1a320fc396febdbc3c55e12c211fff0cb1b6a9bc9fa1eb972ca0c82d8488f81a6c5618f633358b5f67716994400e9973fc714528725634c5ffc9848e37b9478965413cacab11c64c4d3fa11a8cef29fdc16639518170bbb3f16df312205b337cfdd1c250b9de255b93011067fc2ad4bceb84219bef1a4c35d514ef1f06e2cc7618d43b9b04b70b967fa096f9f0d13acd1dcc9d7337c66a035"}], 0x360}, 0x0, 0x4000000}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4007, @fd_index=0x1, 0x4, 0x0, 0x0, 0x5, 0x0, {0x2}}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:33 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2903000000000000000005", @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 12:15:33 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000d8000100000000000000040000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:33 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 45) 12:15:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="143f57007f000000000000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x81, 0x8, 0x72c, 0x800]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x48f2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff7}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x0, @dev}}) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, r1) rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff6000/0x1000)=nil, 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1855.784309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31742 comm=syz-executor.5 [ 1855.842561] FAULT_INJECTION: forcing a failure. [ 1855.842561] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.845381] CPU: 0 PID: 31807 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1855.846966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1855.848842] Call Trace: [ 1855.849444] dump_stack+0x107/0x167 [ 1855.850284] should_fail.cold+0x5/0xa [ 1855.851148] ? create_object.isra.0+0x3a/0xa20 [ 1855.852186] should_failslab+0x5/0x20 [ 1855.853047] kmem_cache_alloc+0x5b/0x310 [ 1855.853978] create_object.isra.0+0x3a/0xa20 [ 1855.854965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1855.856113] kmem_cache_alloc+0x159/0x310 [ 1855.857067] vm_area_dup+0x78/0x290 [ 1855.857915] ? _cond_resched+0x10/0x30 [ 1855.858777] ? copy_page_range+0x24e9/0x3810 [ 1855.859809] ? vm_area_alloc+0x110/0x110 [ 1855.860728] ? up_write+0x191/0x550 [ 1855.861554] ? vm_iomap_memory+0x190/0x190 [ 1855.862517] ? downgrade_write+0x3a0/0x3a0 [ 1855.863476] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1855.864701] ? __vma_link_rb+0x540/0x700 [ 1855.865633] copy_process+0x291b/0x7800 [ 1855.866572] ? __cleanup_sighand+0xb0/0xb0 [ 1855.867546] ? find_held_lock+0x2c/0x110 [ 1855.868477] kernel_clone+0xe7/0x980 [ 1855.869331] ? lock_downgrade+0x6d0/0x6d0 [ 1855.870272] ? find_held_lock+0x2c/0x110 [ 1855.871193] ? create_io_thread+0xf0/0xf0 [ 1855.872137] ? ksys_write+0x12d/0x260 [ 1855.873004] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1855.874115] __do_sys_fork+0x8a/0xc0 [ 1855.874953] ? kernel_thread+0xf0/0xf0 [ 1855.875854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1855.877042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.878213] ? trace_hardirqs_on+0x5b/0x180 [ 1855.879188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1855.880361] do_syscall_64+0x33/0x40 [ 1855.881215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1855.882387] RIP: 0033:0x7fd58bf37b19 [ 1855.883225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1855.887386] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1855.889104] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1855.890716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1855.892324] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.893938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.895540] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:33 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x3, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {0x1000000000}, {0x80}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:47 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 46) 12:15:47 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x281, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) dup2(r3, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3722, &(0x7f0000000500)={0x0, 0x329, 0x1, 0x0, 0x331}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') fork() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r5, 0x10000000) 12:15:47 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x1, 0x39c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:47 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001900)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f00000018c0)={&(0x7f0000000500)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/37, 0x25}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/156, 0x9c}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/34, 0x22}], 0x6}, 0x0, 0x60, 0x1, {0x1}}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:47 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r6, 0x5423, 0xffffffffffffffe0) syz_io_uring_submit(0x0, r1, &(0x7f00000010c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r5, 0x2, {0x0, r2}, 0x9, 0x4, 0x1, {0x0, 0x0, r6}}, 0x0) r7 = getpgrp(0x0) ptrace(0x10, r7) kcmp(0x0, r7, 0x1, r2, r5) fcntl$setown(0xffffffffffffffff, 0x8, r7) waitid(0x0, r7, 0x0, 0x8, 0x0) r8 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x7, 0x44800) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xa, 0x3f, 0x5e, 0x2, 0x0, 0x236, 0x100, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x286, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0x10040, 0xb2, 0x5, 0x4, 0x9, 0x7, 0x800, 0x0, 0xfff, 0x0, 0xfffffffffffffff8}, r7, 0xffffffffffffffff, r8, 0x2) fork() [ 1870.240912] loop0: detected capacity change from 0 to 8257024 12:15:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x3000000, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) ptrace(0x10, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x3, 0xba96}) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:15:47 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {0x0, 0x80}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:47 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040804}, 0x4) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x80010, r2, 0x10000000) r4 = syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f0000000600)='./file0\x00', 0x3f, 0x3, &(0x7f00000007c0)=[{&(0x7f0000000640), 0x0, 0x14}, {&(0x7f0000000680)="9db266d4cc2fd472dbbe3949281352fa5d2fbb334bf703bbfe15f46719b992cc4956bfbe6228093e34c246bd1d5f8ebc2945866e050d5769ba4e7f1fb300f32a431a0e3421187c0be59fdef3ae715f3637554e737cc2a9184251b262f019ffb2493b3db6bbb326acf4fda22ca09877bdc8b87eddf59d1ebbb6144dee78f04b", 0x7f, 0x5}, {&(0x7f0000000700)="f138084a9cd41fdd76bdb459a1155cc64427cd3e852aa7ef447c0c138b5c91c74912234c4b34cf1edc06236ac6c325613854e30a9f5edc60f9e80adcdec138fd92ae52ad5fafa884a2dfca076efb6c3dc53df5435658c6e9071871a16b4fc59f6a00f4a4753bfded9ef99a3fd42976760b7371b2fb320221653e2a2c1f7d0bdbcc79f561669c1ac1f2ac7615c8ff19cd186c", 0x92, 0xfffffffffffeffff}], 0x480, &(0x7f0000000840)={[{@map_off}], [{@obj_role={'obj_role', 0x3d, '&['}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'wpan4\x00'}}]}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = getpid() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5423, 0xffffffffffffffe0) kcmp(r6, 0x0, 0x1, r0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x1000) syz_io_uring_submit(r1, r3, &(0x7f0000000a00)=@IORING_OP_STATX={0x15, 0x6, 0x0, r4, &(0x7f00000008c0), &(0x7f00000009c0)='./file0\x00', 0x20, 0x400, 0x0, {0x0, r5}}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1870.311834] FAULT_INJECTION: forcing a failure. [ 1870.311834] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.314917] CPU: 0 PID: 32454 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1870.316672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1870.318731] Call Trace: [ 1870.319385] dump_stack+0x107/0x167 [ 1870.320257] should_fail.cold+0x5/0xa [ 1870.321144] ? ptlock_alloc+0x1d/0x70 [ 1870.322127] should_failslab+0x5/0x20 [ 1870.322997] kmem_cache_alloc+0x5b/0x310 [ 1870.323928] ptlock_alloc+0x1d/0x70 [ 1870.324727] pte_alloc_one+0x68/0x1a0 [ 1870.325620] __pte_alloc+0x1d/0x330 [ 1870.326568] copy_page_range+0x1b62/0x3810 [ 1870.327666] ? up_write+0x191/0x550 [ 1870.328519] ? vm_iomap_memory+0x190/0x190 [ 1870.329550] ? downgrade_write+0x3a0/0x3a0 [ 1870.330563] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1870.331829] ? __vma_link_rb+0x540/0x700 [ 1870.332783] copy_process+0x759b/0x7800 [ 1870.333728] ? __cleanup_sighand+0xb0/0xb0 [ 1870.334695] ? find_held_lock+0x2c/0x110 [ 1870.335606] kernel_clone+0xe7/0x980 [ 1870.336501] ? lock_downgrade+0x6d0/0x6d0 [ 1870.337503] ? find_held_lock+0x2c/0x110 [ 1870.338501] ? create_io_thread+0xf0/0xf0 [ 1870.339510] ? ksys_write+0x12d/0x260 [ 1870.340399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1870.341493] __do_sys_fork+0x8a/0xc0 [ 1870.342332] ? kernel_thread+0xf0/0xf0 [ 1870.343265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1870.344563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1870.345759] ? trace_hardirqs_on+0x5b/0x180 [ 1870.346803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1870.348119] do_syscall_64+0x33/0x40 [ 1870.349102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1870.350327] RIP: 0033:0x7fd58bf37b19 [ 1870.351215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1870.355603] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1870.357296] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1870.358911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1870.360654] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1870.362316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1870.364008] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:47 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:15:47 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x460, 0x0, 0xfffffffffffffffc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:47 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x48040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x810, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x3010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r2, 0x0, &(0x7f0000000240), 0x0, 0x8c0, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:48 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0xfc, 0x1a, 0x4, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x70bd25, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:48 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 47) 12:15:48 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x8a, 0x6, 0xf9, 0x7, 0x0, 0x2, 0x180, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0xa1}, 0x2, 0x5, 0x2, 0x0, 0x6, 0xf7, 0x668f, 0x0, 0x1, 0x0, 0x3ff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1870.746055] FAULT_INJECTION: forcing a failure. [ 1870.746055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1870.747913] CPU: 1 PID: 33265 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1870.748719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1870.749690] Call Trace: [ 1870.750008] dump_stack+0x107/0x167 [ 1870.750440] should_fail.cold+0x5/0xa [ 1870.750889] __alloc_pages_nodemask+0x182/0x600 [ 1870.751427] ? lock_acquire+0x197/0x470 [ 1870.751892] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1870.752588] ? lock_downgrade+0x6d0/0x6d0 [ 1870.753076] ? vm_normal_page+0x162/0x2e0 [ 1870.753557] ? do_raw_spin_lock+0x121/0x260 [ 1870.754066] alloc_pages_vma+0xbb/0x410 [ 1870.754529] copy_page_range+0x1f38/0x3810 [ 1870.755049] ? up_write+0x191/0x550 [ 1870.755462] ? vm_iomap_memory+0x190/0x190 [ 1870.755953] ? downgrade_write+0x3a0/0x3a0 [ 1870.756459] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1870.757099] ? __vma_link_rb+0x540/0x700 [ 1870.757581] copy_process+0x759b/0x7800 [ 1870.758074] ? __cleanup_sighand+0xb0/0xb0 [ 1870.758579] ? find_held_lock+0x2c/0x110 [ 1870.759056] kernel_clone+0xe7/0x980 [ 1870.759488] ? lock_downgrade+0x6d0/0x6d0 [ 1870.759972] ? find_held_lock+0x2c/0x110 [ 1870.760461] ? create_io_thread+0xf0/0xf0 [ 1870.760950] ? ksys_write+0x12d/0x260 [ 1870.761416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1870.761987] __do_sys_fork+0x8a/0xc0 [ 1870.762420] ? kernel_thread+0xf0/0xf0 [ 1870.762886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1870.763497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1870.764104] ? trace_hardirqs_on+0x5b/0x180 [ 1870.764610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1870.765217] do_syscall_64+0x33/0x40 [ 1870.765650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1870.766260] RIP: 0033:0x7fd58bf37b19 [ 1870.766710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1870.768888] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1870.769808] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1870.770649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1870.771502] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1870.772352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1870.773199] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:15:48 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x281, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) dup2(r3, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3722, &(0x7f0000000500)={0x0, 0x329, 0x1, 0x0, 0x331}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') fork() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r5, 0x10000000) 12:15:48 executing program 1: r0 = syz_io_uring_setup(0x6352, &(0x7f0000000100)={0x0, 0x2000867e, 0x0, 0x0, 0x3b9}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:15:48 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010000000000000000000000194e127ffe85b50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005295f70521e1c1ec3fbd894d23dd40430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c00080008000800"/203], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x9, 0x20010, r2, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000500)=@IORING_OP_STATX={0x15, 0x5, 0x0, r2, &(0x7f0000000600), &(0x7f0000000380)='./file0\x00', 0x200, 0x1000, 0x2, {0x0, r5}}, 0x135) fork() [ 1870.859832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 12:16:03 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0xae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = fork() getpgid(r5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x94891000) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, r1) pkey_mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1000001, r2) 12:16:03 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x2, 0xfffffffc, 0xe0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f0000001780)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\'\\\x14\t\xc2\xaa|\x81\x91=;m\xaf\x88\xf7\x01\xce\xdc\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xdf\xb9\x01G\xe1Y\'2\xcc\xaea\x80\xc6\x92\x00\x00\x1e/\x00\x00\x92\xb5\xa6\x00\x00\xde\x13\xf1JdH\xf5\xe7H\xb8\x1e\x9f\x1fg\xd2\xac@i\xa0!U\x9a\xe1\x9a\xb1\x004\x01N\xfd\xd1\xbbe\x9b\x9aq\xecUL5\xa3P\xa7\xca-\xac\xb2\x91\x1c\xf1\xa7*\xa1\x04\xc3sD\xf8J\xb9\xf4\v\x13\xf2\x19D\x87\\\v=\n\x1c\xfa\xf0J\xd7\x86\xe12\xafQ\xda\xc1\xf9\xaa\x05\xf4\x00\x00\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = syz_open_dev$vcsu(&(0x7f00000010c0), 0x6, 0x802) openat$full(0xffffffffffffff9c, &(0x7f0000001900), 0x8202, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001100)=""/167, 0xa7}, {&(0x7f00000011c0)=""/84, 0x54}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000001300)=""/117, 0x75}, {&(0x7f0000001380)=""/203, 0xcb}, {&(0x7f0000001480)=""/55, 0x37}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/127, 0x7f}, {&(0x7f0000001580)=""/141, 0x8d}, {&(0x7f0000001640)=""/115, 0x73}], 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000001840)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f00000014c0)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf45dba5d73ffffff0000040020", 0x16}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES16=r4]) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffa}, 0x2, 0x800000, 0x460, 0x0, 0xfffffffffffffffe, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x3) fork() 12:16:03 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x1]}, 0x8, 0x800) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5e, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext, 0x80, 0x0, 0x460, 0x0, 0x3, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x0) fork() r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) r6 = getpgrp(0x0) ptrace(0x10, r6) kcmp(0x0, r6, 0x1, r2, r5) fcntl$setown(0xffffffffffffffff, 0x8, r6) waitid(0x0, r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x6, &(0x7f00000002c0)={0x4, 0x8}, &(0x7f0000000380)) 12:16:03 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xbfb76daf3e8db529, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fork() 12:16:03 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {0x0, 0x80}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:03 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_io_uring_setup(0x4d4b, &(0x7f0000000500)={0x0, 0xa577, 0x0, 0x3, 0x375, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000600)) syz_io_uring_setup(0x5a27, &(0x7f0000000640)={0x0, 0x1a01, 0x10, 0x3, 0x72}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0xdd9a, 0x0, 0x7ff}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bda400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071fd3164000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:03 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000009cf82c20b6c1a9240ed7317d53320c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:03 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 48) [ 1886.498292] FAULT_INJECTION: forcing a failure. [ 1886.498292] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.499769] CPU: 1 PID: 33799 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1886.500617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1886.501630] Call Trace: [ 1886.501968] dump_stack+0x107/0x167 [ 1886.502419] should_fail.cold+0x5/0xa [ 1886.502890] ? vm_area_dup+0x78/0x290 [ 1886.503361] should_failslab+0x5/0x20 [ 1886.503829] kmem_cache_alloc+0x5b/0x310 [ 1886.504331] ? lock_downgrade+0x6d0/0x6d0 [ 1886.504843] vm_area_dup+0x78/0x290 [ 1886.505300] ? _cond_resched+0x10/0x30 [ 1886.505780] ? copy_page_range+0x24e9/0x3810 [ 1886.506352] ? vm_area_alloc+0x110/0x110 [ 1886.506853] ? up_write+0x191/0x550 [ 1886.507301] ? vm_iomap_memory+0x190/0x190 [ 1886.507820] ? downgrade_write+0x3a0/0x3a0 [ 1886.508342] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1886.509007] ? __vma_link_rb+0x540/0x700 [ 1886.509511] copy_process+0x291b/0x7800 [ 1886.510030] ? __cleanup_sighand+0xb0/0xb0 [ 1886.510564] ? find_held_lock+0x2c/0x110 [ 1886.511071] kernel_clone+0xe7/0x980 [ 1886.511532] ? lock_downgrade+0x6d0/0x6d0 [ 1886.512039] ? find_held_lock+0x2c/0x110 [ 1886.512538] ? create_io_thread+0xf0/0xf0 [ 1886.513046] ? ksys_write+0x12d/0x260 [ 1886.513515] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1886.514116] __do_sys_fork+0x8a/0xc0 [ 1886.514569] ? kernel_thread+0xf0/0xf0 [ 1886.515054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1886.515694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1886.516320] ? trace_hardirqs_on+0x5b/0x180 [ 1886.516847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1886.517475] do_syscall_64+0x33/0x40 [ 1886.517929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1886.518558] RIP: 0033:0x7fd58bf37b19 [ 1886.519012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1886.521250] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1886.522189] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1886.523063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1886.523933] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1886.524799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1886.525666] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 [ 1886.568332] loop0: detected capacity change from 0 to 2103296 12:16:04 executing program 3: r0 = syz_io_uring_setup(0x5ee8, &(0x7f0000000100)={0x0, 0xbb1d, 0x1, 0x3, 0x399}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r8}}, 0x7fff) syz_io_uring_setup(0x11f1, &(0x7f0000000380)={0x0, 0x6f5b, 0x2, 0x0, 0x253}, &(0x7f0000940000/0x4000)=nil, &(0x7f0000941000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) fork() io_uring_enter(r2, 0x65c9, 0xc8dc, 0x1, &(0x7f0000000500)={[0x7fff]}, 0x8) 12:16:04 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x7e, 0x6, 0x1, 0x0, 0x5, 0x88000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x400c, 0x3, 0xc5c, 0x7, 0x1f, 0x81, 0x100, 0x0, 0x10000, 0x0, 0x81}, 0xffffffffffffffff, 0xf, r0, 0x8) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() mlock(&(0x7f0000fef000/0x1000)=nil, 0x1000) rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:16:04 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 49) 12:16:04 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) r3 = gettid() pkey_free(0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0x8000, 0x2, 0x1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf9ffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x10010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x8800000) [ 1886.860455] FAULT_INJECTION: forcing a failure. [ 1886.860455] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.861953] CPU: 1 PID: 34195 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1886.862713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1886.863610] Call Trace: [ 1886.863909] dump_stack+0x107/0x167 [ 1886.864306] should_fail.cold+0x5/0xa [ 1886.864719] ? create_object.isra.0+0x3a/0xa20 [ 1886.865220] should_failslab+0x5/0x20 [ 1886.865632] kmem_cache_alloc+0x5b/0x310 [ 1886.866080] create_object.isra.0+0x3a/0xa20 [ 1886.866553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1886.867107] kmem_cache_alloc+0x159/0x310 [ 1886.867558] vm_area_dup+0x78/0x290 [ 1886.867991] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1886.868494] ? lock_downgrade+0x6d0/0x6d0 [ 1886.868940] ? perf_trace_lock+0xac/0x490 [ 1886.869389] ? copy_page_range+0x24e9/0x3810 [ 1886.869868] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1886.870446] ? __lockdep_reset_lock+0x180/0x180 [ 1886.870953] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1886.871457] ? avc_has_extended_perms+0xf40/0xf40 [ 1886.871978] ? copy_process+0x2b60/0x7800 [ 1886.872427] ? vm_area_alloc+0x110/0x110 [ 1886.872872] ? selinux_vm_enough_memory+0x114/0x180 [ 1886.873410] ? selinux_sb_statfs+0x250/0x250 [ 1886.873882] ? up_write+0x191/0x550 [ 1886.874289] ? percpu_counter_add_batch+0x8b/0x140 [ 1886.874827] ? __vm_enough_memory+0x184/0x360 [ 1886.875309] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1886.875864] copy_process+0x291b/0x7800 [ 1886.876313] ? __cleanup_sighand+0xb0/0xb0 [ 1886.876778] ? find_held_lock+0x2c/0x110 [ 1886.877219] kernel_clone+0xe7/0x980 [ 1886.877623] ? lock_downgrade+0x6d0/0x6d0 [ 1886.878079] ? find_held_lock+0x2c/0x110 [ 1886.878517] ? create_io_thread+0xf0/0xf0 [ 1886.878966] ? ksys_write+0x12d/0x260 [ 1886.879382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1886.879905] __do_sys_fork+0x8a/0xc0 [ 1886.880305] ? kernel_thread+0xf0/0xf0 [ 1886.880737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1886.881304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1886.881862] ? trace_hardirqs_on+0x5b/0x180 [ 1886.882342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1886.882898] do_syscall_64+0x33/0x40 [ 1886.883299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1886.883850] RIP: 0033:0x7fd58bf37b19 [ 1886.884257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1886.886235] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1886.887051] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1886.887823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1886.888595] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1886.889364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1886.890135] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:16:04 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) openat(r2, &(0x7f0000000380)='./file0\x00', 0x24200, 0x100) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1886.960644] loop1: detected capacity change from 0 to 2103296 12:16:04 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000a0000080000000c000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000380)=0x8, 0x4) 12:16:04 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_io_uring_setup(0x4d4b, &(0x7f0000000500)={0x0, 0xa577, 0x0, 0x3, 0x375, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000600)) syz_io_uring_setup(0x5a27, &(0x7f0000000640)={0x0, 0x1a01, 0x10, 0x3, 0x72}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0xdd9a, 0x0, 0x7ff}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bda400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071fd3164000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r6, 0x5423, 0xffffffffffffffe0) syz_io_uring_submit(r3, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x2}, 0x1}, 0x7a2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000240)={0x0, 0x867b, 0x1, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = socket$unix(0x1, 0x5, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r8, 0x0, &(0x7f00000000c0)="92efc8f6ed71efdc90c3fcd15a7ea91d3ccd366f0ab7b91ff67d924a1e5acb5b1ab71839a04fe7a2edac6e1c387ee092a215b298d2750f58c4f7b3be59311e44182bd940e42550e903853e01c089a19a584c2772aaae568da78aee833d17a3168abcb3c586990beca11ac0fa8cdf72d6f2d8f89b5e62533aecff362901893483054b50a0122d5c3d62341ab987bce3d6d66c968cd79fe8af86b4f113b7877b", 0x9f, 0x4050, 0x0, {0x0, r9}}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 50) 12:16:17 executing program 1: setsockopt(0xffffffffffffffff, 0x4, 0x7fff, &(0x7f0000000600)="6779cfd43a5e64994e401f14c1129d0ebcb995bb19eb79ac0607de4a4e7ae47b8e39f8931c3e016cf512f276d1028b8c56d668ab4704a7840d9f06ca6bec5d745acf631ed0979ecc10ce5a2e78d0564575d5b14a7e9fb99490792911def0ce8aa7d5f533051f374459b21400bac1e62f5c708c3955266fdc82e7045bc96f3ff517cbccadd85f74763acd6f2106d0f57674d09e23236d2d87b7c937702b35e9e5b71d55c45003666cc240a7fb1fb2", 0xae) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867a, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000006c0)) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="80000059bcbd45000000000000000000"]) syz_io_uring_submit(r1, r5, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6007, @fd=r8, 0x9, 0x8, 0x1, 0x20, 0x0, {0x3}}, 0x5) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffbfc}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0xdbc8, 0x460, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000f6fffffffffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 0: r0 = syz_io_uring_setup(0x3a52, &(0x7f0000000100)={0x0, 0x8682, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc95, &(0x7f0000000180)={0x0, 0x1004c0a, 0x0, 0x5, 0x158, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x50, r3, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd_index=0xa, 0x81, 0x8, 0x5, 0x1a, 0x0, {0x3}}, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) fork() 12:16:17 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:16:17 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x4, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1899.801726] FAULT_INJECTION: forcing a failure. [ 1899.801726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1899.804938] CPU: 1 PID: 34750 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1899.806725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1899.808862] Call Trace: [ 1899.809478] dump_stack+0x107/0x167 [ 1899.810443] should_fail.cold+0x5/0xa [ 1899.811451] __alloc_pages_nodemask+0x182/0x600 [ 1899.812666] ? __lockdep_reset_lock+0x180/0x180 [ 1899.813882] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1899.815509] alloc_pages_current+0x187/0x280 [ 1899.816671] pte_alloc_one+0x16/0x1a0 [ 1899.817676] __pte_alloc+0x1d/0x330 [ 1899.818649] copy_page_range+0x1b62/0x3810 [ 1899.819603] ? vm_iomap_memory+0x190/0x190 [ 1899.820698] ? up_write+0x191/0x550 [ 1899.821632] ? downgrade_write+0x3a0/0x3a0 [ 1899.822744] ? down_write_killable+0x180/0x180 [ 1899.823930] ? __vma_link_rb+0x540/0x700 [ 1899.824983] copy_process+0x759b/0x7800 [ 1899.826063] ? __cleanup_sighand+0xb0/0xb0 [ 1899.827254] ? find_held_lock+0x2c/0x110 [ 1899.828263] kernel_clone+0xe7/0x980 [ 1899.829184] ? lock_downgrade+0x6d0/0x6d0 [ 1899.830231] ? find_held_lock+0x2c/0x110 [ 1899.831221] ? create_io_thread+0xf0/0xf0 [ 1899.832090] ? ksys_write+0x12d/0x260 [ 1899.832901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1899.833926] __do_sys_fork+0x8a/0xc0 [ 1899.834722] ? kernel_thread+0xf0/0xf0 [ 1899.835552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1899.836648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.837725] ? trace_hardirqs_on+0x5b/0x180 [ 1899.838642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.839723] do_syscall_64+0x33/0x40 [ 1899.840507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1899.841589] RIP: 0033:0x7fd58bf37b19 [ 1899.842376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1899.846253] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1899.847863] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1899.849378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1899.850883] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1899.852378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1899.853877] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:16:17 executing program 6: r0 = syz_io_uring_setup(0x5ee8, &(0x7f0000000100)={0x0, 0xbb1d, 0x1, 0x3, 0x399}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r8}}, 0x7fff) syz_io_uring_setup(0x11f1, &(0x7f0000000380)={0x0, 0x6f5b, 0x2, 0x0, 0x253}, &(0x7f0000940000/0x4000)=nil, &(0x7f0000941000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) fork() io_uring_enter(r2, 0x65c9, 0xc8dc, 0x1, &(0x7f0000000500)={[0x7fff]}, 0x8) 12:16:17 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f0000000600)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbbe\xdfp\xd7sI\x8dyz\x1c\xb6w\x84\xf3\xb1A\xa7\x14\x82\xd9\xaea\x80\xc6\x92]Gr4\xc9c\xc3\x14\xb0\x93\xc2\b\xe8<\x11)3\xfb\x95\xe1\xce\xae\x7f\x9c\x8a\xaf\x87\xf4%\xad\x993\xf5\xb95\x946\xad\xd7\xc3P\x1d\xad]\x7f\xe8\xf3\xcf\xc7\xb8IA[$\x10\x00g\xa9a\x8a\xc6\xec\xdbw\xae\xac\xb2S\x81\x00\x00\x00d4\xe13\x9e\x14\x88\xf9\xf2#1v,*\x06h\xddm$\xf7\xfb\x05y\xf2\f9\xe8N\xa4<\x16ys\xd0\t\xb75\x17\xa0\x83\x82\xd5b\xd7W', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() acct(&(0x7f0000000080)='./file0\x00') rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:16:17 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0xa, 0x100010, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000267f7e416f06b1e7b01d9f8ae013290000000000000000000000000000080000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000c00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r2, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@nl, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)="96e3d56ebaf8777e35361358a19d9460c31480c013621504517723765ff24e428d2d17ca305a826d206ce6132930be9dd43808c1dd4496aac1ac0d77829c77005ec0899f964c69823eb6c520795ea7aa93e8bb84b53e2b3567a42ba45271ab828533ab40e337fb6f59c0f0af6a63ee7981c2b6ae8ff1d635773cd597156e51c534a3bc9487b7aeefd2605a8dc4a9d5930dc518997a6de6d31567a09c5113a2e815922fc1fb687c34e544ee7163e49a0a3bf95cef814a10460cd40a530a8ee3cfff9b6f2748856613c3d4dda6059c3694177d2c75938cd913ebbcc8d84cc830ba4422642af6d4b107809b36f1", 0xec}, {&(0x7f0000000380)="eed542e79a12a6854cd0338635203510410fba30c99dc3377cba645f598f9a71c147053f53e7163bd029a55a602e3d2375850762be3502ec10011443816b52ff2345f36a0b8c", 0x46}, {&(0x7f0000000840)="2a2651731bd73903067168d6942583f207b8c094156ac544528164b1f2c799bba04a0ee94b03ef214eb37fade597d5218792dc67ebf818821b0d12317ced10596c1f7c601d25281e64856e049109574fa73611fd9fb7485d6b496303d4b334176fc178e9f658792fa7e93fb2f0cdb5c53c7c888ae204bf4521240aee2f12748b0585743b21b91adf3ad37fffab2b73f1d38fc4ec2b742b60b45f34c32af0965b346c1ff4bcddae3eac177fae3a7980", 0xaf}, {&(0x7f0000000500)="d9d577d2644f85c050425c2cada9d10ac1dc2b1ac489ae78c05ee7958aee24e4136af74a11047b136f2314cccb5efb38a5ce5f408222dee78f20661085eece2700debc03bb1a838a94ecdb5d4ce776fc3286774eabe11d06861d550f570f181732c5062bc0acff6991d9814a7ba5f60c54878014565b2827f01f", 0x7a}, {&(0x7f0000000900)="cff1b4a2b086e064b335cf749210fa9b2698aa083b593a3aa5b033d8438cff5a31c55232a690dcc2fc566c474c4828b319fbb5ae939917b7a71df4e8f9503e3673cd35e1f1", 0x45}, {&(0x7f00000002c0)="0c1762", 0x3}, {&(0x7f0000000980)="1b031d6a6820dafb8e874579cc65ee252a82cd4cf534df9e10339ca1f1820ff08260ea2da827d95b7d39600470f4bb7bd9df69bb8ff9e39e9170bb03c5b0f91c214d96c743162ae919bb7ae1b4824baad86093eec07c24c0c625ff820b6842a9f8dc96c32f371ef8db1a10a0eb3ab8a97bdf8f32d9dfab6b96d59aa00a5d23ac402471ab96004ca6ecbeff3ce8b48bc08d64cd83adede52bbd3d812305a099c3da5c27429f4d52fb176cd0662f332f9cb9c7350a5565e422f2d59e60677ad835e63a6f744c14d1eeaa55eabb988daa95fc0b9d3adc2c738d595d80981a3e647b62ae845817c64d7dcadfc96dbf43db72cc", 0xf1}, {&(0x7f0000000a80)="bc4ac3fe5e5b0a2882a6dbc1eafad7bddc1f2df537bf52bf9710538bc63c8aaf46d00cd21311a2528bfee1db3683eeecc8565204c62e97210ff5131848d108213fa6c691a3daa4a96874c96fb0f04f2a3378f03c17c018a54277a0c7d1e78a124fcdf92fa85fdc9eeca2b15e1e64661862fb9ddedba55fd2020a136d1ce9af25871b6392243cce70d5af65a93fd614fb51ce9c8919d482b11fb9989c2d9fc7eb856c771f0b3c43c08d2a11b86d3635d744891900f046ebfae463882f4dc9800b5609449d0d1be8e3d65348fb6817c26eaf", 0xd1}], 0x8}, 0x0, 0x8010}, 0x506e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 51) 12:16:17 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002100)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd, 0x1, &(0x7f00000020c0)=[{&(0x7f0000001d00)="965dde57f2446dc4b6030fc71444e14e8760b1144a726ec8d5ed186d592ac77538d36d1faf3419317959f704511e646b83232916418983464c0fb9f4c132800a970a7d236a4d99400ebe455c2430ee4ca66a62e0b9fd1d2b567622ee233eb91a91325b9e2f34", 0x66}, {&(0x7f0000002000)="e39d90190661b5c62a6c773056c92e1caa29fd2b", 0x14}, {&(0x7f0000002040)="4ce45a895f702e6f0f669233543f2abbc53d9dbf48c4a3c121193f31ff89d99afc0788f6147b27e4844d2b4f9e90d72847dd8d76e7f18561426cc9a5d38f54fc11ade2", 0x43}], 0x3, 0x6, 0x0, {0x1}}, 0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001500210e00080000000000000000000b16ccff895bc85909cbc1e121640c78868f204c79cb483a19764a140d1db2e3507eeb314f870d91"], 0x14}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x3, 0x1, {0x2}}, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d2, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() [ 1900.415559] FAULT_INJECTION: forcing a failure. [ 1900.415559] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.418380] CPU: 0 PID: 35482 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1900.419937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1900.421804] Call Trace: [ 1900.422406] dump_stack+0x107/0x167 [ 1900.423217] should_fail.cold+0x5/0xa [ 1900.424068] ? create_object.isra.0+0x3a/0xa20 [ 1900.425098] should_failslab+0x5/0x20 [ 1900.425949] kmem_cache_alloc+0x5b/0x310 [ 1900.426870] create_object.isra.0+0x3a/0xa20 [ 1900.427852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1900.429001] kmem_cache_alloc+0x159/0x310 [ 1900.429937] anon_vma_clone+0xdc/0x590 [ 1900.430826] anon_vma_fork+0x82/0x640 [ 1900.431676] ? __vm_enough_memory+0x184/0x360 [ 1900.432676] copy_process+0x7218/0x7800 [ 1900.433601] ? __cleanup_sighand+0xb0/0xb0 [ 1900.434573] ? find_held_lock+0x2c/0x110 [ 1900.435477] kernel_clone+0xe7/0x980 [ 1900.436307] ? lock_downgrade+0x6d0/0x6d0 [ 1900.437225] ? find_held_lock+0x2c/0x110 [ 1900.438148] ? create_io_thread+0xf0/0xf0 [ 1900.439072] ? ksys_write+0x12d/0x260 [ 1900.439926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1900.441003] __do_sys_fork+0x8a/0xc0 [ 1900.441829] ? kernel_thread+0xf0/0xf0 [ 1900.442720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1900.443883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1900.445022] ? trace_hardirqs_on+0x5b/0x180 [ 1900.445979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1900.447130] do_syscall_64+0x33/0x40 [ 1900.447957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1900.449093] RIP: 0033:0x7fd58bf37b19 [ 1900.449935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1900.454025] RSP: 002b:00007fd5894ad188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1900.455733] RAX: ffffffffffffffda RBX: 00007fd58c04af60 RCX: 00007fd58bf37b19 [ 1900.457317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1900.458916] RBP: 00007fd5894ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1900.460506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1900.462085] R13: 00007ffe8dad649f R14: 00007fd5894ad300 R15: 0000000000022000 12:16:17 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) r1 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) r2 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r1}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x80, 0x0, &(0x7f0000000500), 0x2a, &(0x7f0000000540)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r7, 0x5, 0x0, 0x1, 0x0, 0x1, {0x0, r8}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:17 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) pkey_mprotect(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0xf71a4b191a3b01d8, r1) 12:16:32 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() (fail_nth: 52) 12:16:32 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:32 executing program 3: r0 = syz_io_uring_setup(0x80068d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:32 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:32 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:32 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(r0, 0x0, 0x0, 0x8800000) 12:16:32 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010080b6aa492bc9cda7a745d2eb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006503b7c242e871fb00000000000000000000000000000000000000000000000000000000000000f1ffffff0000000000000a0000080000000000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:32 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x4, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1915.550533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1915.556952] loop0: detected capacity change from 0 to 2103296 12:16:46 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f0000000600)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbbe\xdfp\xd7sI\x8dyz\x1c\xb6w\x84\xf3\xb1A\xa7\x14\x82\xd9\xaea\x80\xc6\x92]Gr4\xc9c\xc3\x14\xb0\x93\xc2\b\xe8<\x11)3\xfb\x95\xe1\xce\xae\x7f\x9c\x8a\xaf\x87\xf4%\xad\x993\xf5\xb95\x946\xad\xd7\xc3P\x1d\xad]\x7f\xe8\xf3\xcf\xc7\xb8IA[$\x10\x00g\xa9a\x8a\xc6\xec\xdbw\xae\xac\xb2S\x81\x00\x00\x00d4\xe13\x9e\x14\x88\xf9\xf2#1v,*\x06h\xddm$\xf7\xfb\x05y\xf2\f9\xe8N\xa4<\x16ys\xd0\t\xb75\x17\xa0\x83\x82\xd5b\xd7W', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=@allocspi={0x290, 0x16, 0x8, 0x70bd26, 0x25dfdbfc, {{{@in6=@loopback, @in6=@private0, 0x4e24, 0x9, 0x4e24, 0x3800, 0xa, 0x0, 0xa0, 0x6, r1, r2}, {@in6=@mcast1, 0x4d2, 0x2b}, @in=@broadcast, {0xfffffffffffff5aa, 0xffffffffffffffff, 0xe263, 0x5, 0x1df, 0x2, 0xc1, 0x7f}, {0x800, 0x6, 0x3, 0x80000001}, {0x5, 0x0, 0x1}, 0x70bd2d, 0x34ff, 0x2, 0x2, 0x3, 0x4}, 0x7f, 0x401}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e24, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, @algo_auth_trunc={0x8f, 0x14, {{'sha512-ce\x00'}, 0x218, 0x100, "a1319e26d6815f0034b88d7e340127ca6da969c21b4be0220d1f9b8999a7d269966b7ce3a9a5a4ea7c0701ee73439263fa2926e0dff0df02365befe24f9378083628cc"}}, @mark={0xc, 0x15, {0x35075c, 0x28266420}}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x8, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0x88, 0x0, r3}, {0x8, 0x5, 0x0, 0x1, 0x9, 0x7, 0x3, 0x34}, {0x80000000, 0x10000, 0x4, 0x100000000}, 0x37, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}}, @sec_ctx={0x2c, 0x8, {0x28, 0x8, 0x1, 0x5, 0x20, "cc0731532dc7703f5a6860d69fe48e7e5a08b0907afb50cc0518751ccf552352"}}, @replay_thresh={0x8, 0xb, 0xffffff7f}]}, 0x290}, 0x1, 0x0, 0x0, 0x64000}, 0x4000000) r4 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x20, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r4, 0x10000000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c000800080008000000000085bf18bfa4f606e3566cb8"], 0xfc}}, 0x0) write$vga_arbiter(r5, &(0x7f0000000080), 0xf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x1, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x460, 0x5, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r5 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0xc, 0x0, 0x0) r6 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r5}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r1, 0x0, &(0x7f0000000240)='./file0\x00', 0x100, 0x400240, 0x23456}, 0x4) 12:16:46 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 3: r0 = syz_io_uring_setup(0x1a3d, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x2, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) syz_io_uring_setup(0x69e4, &(0x7f0000000240)={0x0, 0x211a, 0x4, 0x0, 0x210, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() r3 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r3) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, r3) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) readahead(r4, 0x1, 0x1) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r5 = getpid() rt_tgsigqueueinfo(r5, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:16:46 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0xafda48344c5a7051, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000500)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a0001000000000000000000000000002c000000000000ffffac141400e00000020300000000000000e12c330c54092effa82a334bb900000000bea835020069d0858a7d14a1c4bc280000000000e8ffff00cd34fe4ffabbef4f32139f0c7429ab5d4b7d546cc9aa4416a3d4b06d6f17c72b02f90da9a0424d0000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x5}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x3, &(0x7f0000000080)={0xfffffffd, 0x7fff}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:16:46 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:16:46 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000007, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000500)="76364b7021773544485eee9bbf212437c10313e9702f0f06479082c1b126c232ad3b804d4eea73a4d37156f633355fe3b1882e81f2bd93744169ab4270697a02225010cd52e06cb13ad294c4259fdaadbf7c6ea8bdf75708889826762757271b0782b92637b93d2290a2c7aa3a6d5dbb994158de0e98", 0x76, 0x4004800}, 0x90c) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000a00000800000000000000000c0007fd0800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0xafa, &(0x7f0000000380)={0x0, 0xa1e1, 0x8, 0x3, 0x7f}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000500)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x9) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r10 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r9, 0x0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xa0800, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r11, 0x4, &(0x7f0000000280)=r8, 0x1) fork() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="000000002e2f66696c653000026bda8657815c21dd75fd033a0319dab2ff4f5606dde0a8e6b3f0990502929609faa7f28dc261dccf3775a2526d4bd3e3c42c16bb07f02db3704f495fd293ac1708ea7d01f4357759a923ec64d576a5667bcddf8050cdbc4bc6e3"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x84031, r12, 0x0) 12:16:46 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/88, 0x58}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) fcntl$lock(r0, 0x26, &(0x7f00000002c0)={0x2, 0x1, 0xffffffff, 0xbe, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) memfd_create(&(0x7f0000000500)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x5) preadv2(r1, &(0x7f0000000900)=[{&(0x7f0000000640)=""/61, 0x3d}, {&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000800)=""/244, 0xf4}], 0x4, 0x3, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r3 = io_uring_setup(0x34cc, &(0x7f0000000240)={0x0, 0x7759, 0x8, 0x1, 0x332}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000600)={0x4, &(0x7f0000000380)=[{0x9, 0x5, 0x8, 0xffffffff}, {0x3, 0x1, 0xff, 0x4}, {0x3, 0xd, 0x7, 0x1}, {0x22, 0x7, 0x4, 0x588}]}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r3, 0x8000000) 12:16:46 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82040, 0xb0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000240)={0x100, 0x800, 0x6, 0xffff, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) renameat(r1, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00') fork() 12:16:46 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) fsetxattr$security_evm(r0, &(0x7f0000000380), &(0x7f0000000500)=@v1={0x2, "687840f5dc145193f924e7730a38fb"}, 0x10, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r1, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:16:46 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000380)="95af922c8af12e0ad261780a728eda930c870ea462720724153cb9f51218e6a101dc5e951306ed48be1e147214a9031c5e55564a3dd4e62b28edc330dd0c6abc7c684f58cdd36a2559bd868c1b92b22a69ed0a41284a4774e342b31899acb5ea1bce8a551aed8509965a2f6b3232c6eb67a911f8e899ce0e2362af01b284a4f5a43595f8283ef13d64b30ac00c7735a6ffee5ddfebdd73b1a9c78d8d51", 0x9d}, {&(0x7f0000000600)="94f26708dfa18396ebc95f28e563d017e1fedb66c98aa05b9dcbd617dcfc0c6130811355754287d3aa9dc4f321adc1c0e42c93e9d0d718df7e06c351ee4d349a2428df1ab6619fbc6318cfab67c124acb45398dc15027f796e71e01769f130f42cc400487f704d3104bba110415e720495df4be188194c284987215b1ea5b0e7c08d26a56634309bcd16fde3d057105351680be5e8a268ec031d9e3c2b1018d41612bb3f2716b7cc3905fb", 0xab}, {&(0x7f0000000500)="8a57e1f8ce7b623390181874a8337df3ca30", 0x12}, {&(0x7f0000000540)="ab73a49aabb988cf62f759c90faf437fed8029702897e83743fb7d1f55a6270a1866d54bdd", 0x25}, {&(0x7f00000006c0)="f645818ffb7dd7bf9d8bf9de2b91d82d4b2e2f273725e189021906d5c1438d3719f41456b700328a2a48dc7e1cef2c2d070e9b6230e7ba788d0610ea7d0536211c7f053f743859d71168695c4344d84677212289f199b7f2b0cf425c07f1f9208353cef4d50ffadeb716955f907388236a9f9eb6722bcddb89ce5e2804fe303ce18dfd1a9aaf35d9cbef8696a9b7924c2493799a0cf48a7bb5cb6dc37aa5395c99d7ce0671bcd8", 0xa7}], 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0x1, 0x67, 0x5, 0x3, 0x0, 0x6, 0x820, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x1f}, 0x0, 0x800, 0x3f, 0x1, 0x3, 0x0, 0x7, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xf, r1, 0x1) fork() [ 1929.404767] loop3: detected capacity change from 0 to 2103296 12:16:46 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r3) pkey_free(r3) mbind(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x8, 0x80, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r2, 0x0, &(0x7f0000000000)) pkey_free(r0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1929.555701] loop7: detected capacity change from 0 to 2103296 12:16:46 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) ftruncate(r0, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x38a6}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x9}, {&(0x7f0000012000)="504d4d00504d4dff", 0x3, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r1]) r2 = syz_io_uring_setup(0x155f, &(0x7f0000000100)={0x0, 0x429e, 0x4, 0x0, 0x1d1, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001100), &(0x7f0000000080)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r4 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0xc, 0x0, 0x0) r5 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r4}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000001240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x335e, &(0x7f0000001140)={0x0, 0x62c7, 0x2, 0x2, 0x8000312}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000010c0), &(0x7f00000011c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000001200)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2}, 0x9) [ 1929.628821] loop2: detected capacity change from 0 to 2103296 12:16:47 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16=r4, @ANYRES64]) io_uring_enter(r4, 0x6fcd, 0x7f36, 0x0, &(0x7f00000010c0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5423, 0xffffffffffffffe0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={0x0, 0x1, 0x1}) r1 = syz_io_uring_setup(0x2213, &(0x7f0000000100)={0x0, 0x867e, 0x20, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r2 = accept(0xffffffffffffffff, &(0x7f0000000240)=@nfc, &(0x7f00000002c0)=0x80) dup(r2) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) syz_open_pts(r0, 0x200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() readv(r2, &(0x7f0000000380)=[{&(0x7f0000000a00)=""/234, 0xea}], 0x1) [ 1929.742149] loop4: detected capacity change from 0 to 2103296 12:16:47 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() [ 1929.795551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:16:47 executing program 7: r0 = syz_io_uring_setup(0x10cc, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:16:47 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x8000867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000010c0), 0x8}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x40c5}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6e, 0x80, 0x6, 0x6, 0x0, 0x1ff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xdba, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x1050, 0x8, 0x7, 0x6, 0x48, 0x17, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffa580}, 0xffffffffffffffff, 0xd, r1, 0x3) [ 1929.831334] loop4: detected capacity change from 0 to 2103296 12:17:06 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3f, 0xf6, 0x8d, 0x1f, 0x0, 0x9, 0x100c, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x5, 0x1}, 0x40000, 0x9, 0x8000, 0x6, 0x2, 0x6c2, 0xfbe, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r3) pkey_mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2000001, r3) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r4 = getpid() rt_tgsigqueueinfo(r4, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:17:06 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000300), 0xffff, 0x101000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0x81}, {&(0x7f0000000280)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e00000020000000000000000000000000000000000000000000000000000000064065e8400261c3db6b20412954101c37a93b6b8b9ab8432f2144224bcc1a0131ce4642b1fb7e671013010bb9718bba3b8c3df3723bf8f252e69cae0aef4b27a06eaec4c59570a085444be0d6bb09f0a0bea00b6e7e04fee9dbc519721ef7a801827de9a27eeb6f3e1e507e281042d1f055ffca4dd32a68e9c210e73e3ad488fd32f49ca542635c0b6162ce9934a4c18565f2db1a03d362e3113bf", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() io_uring_enter(r0, 0xa, 0x4de2, 0x0, &(0x7f0000000240)={[0x81]}, 0x8) 12:17:06 executing program 2: r0 = syz_io_uring_setup(0x5a17, &(0x7f0000000100)={0x0, 0xdb70, 0x0, 0x0, 0x396}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0xc, 0x0, 0x0) r8 = syz_io_uring_setup(0xc97, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r7}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000940000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r12, r10, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}, 0x1) fork() 12:17:06 executing program 3: r0 = syz_io_uring_setup(0x168d4, &(0x7f0000000240)={0x0, 0x9f83, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:06 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_enter(r1, 0x5182, 0x3ae, 0x2, &(0x7f0000000240), 0x8) 12:17:06 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000003d811021000000fc0100000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20f4d288f0000000000000000000000000000000000000000000000000000000000000000000000000ac3d486aef49fdae900000800000000000000000c000800"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:06 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) 12:17:06 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r2 = syz_io_uring_complete(r1) mmap$usbmon(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r2, 0xe2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1949.649710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:17:07 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) 12:17:07 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) 12:17:07 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000180000000000000000000000000000000000000ffffac140226ffffffffffff000000000000ee7d6b09f9cddb5ab493c200"/75, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143d000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:07 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_enter(r1, 0x3e46, 0x51a7, 0x1, &(0x7f0000000280)={[0x7]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) syz_io_uring_setup(0x139c, &(0x7f00000010c0)={0x0, 0xaeeb, 0x0, 0x1, 0x15d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001140), &(0x7f0000001180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:07 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x100010, r2, 0x67e31000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 1950.035354] loop3: detected capacity change from 0 to 2103296 12:17:22 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x1, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x71, 0x460, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 3: r0 = syz_io_uring_setup(0x5dc1, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 1: r0 = syz_io_uring_setup(0x564, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x395}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000600)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x40, 0x8000, 0x12345}, 0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x8, 0x8010, r1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x134, 0x1f, 0x1, 0x70bd2c, 0x25dfdbfb, {0x19}, [@generic="7ae5a5fe4c207f44d582ea8eae9ae76439cc8bf5a765b5b7afa36bd03c7bfab02fef592f483e5f66ed3f6f800208ec134ef88c9282069ebe885ab43c0e10f1b693ef88f6de3982887edd4dc01f2518d1306ce43dec036c0067586ed8f9b0f001380bf25169f9864816e42983624e50e35b7dccb239932c454d77c162e3754419b7a325399e7cf2dd7fedaf7c028c50386dda42482f015eaa9a62290b4f98a79a8e7df9a8e0b722ef7b51e6fa1e2386842a30c609eb220dcdbff05776a03d50976ae697e7ad705a713194fc6673f182c4529332a4f05861f1bea26fec713269d6b236a67d57417f0a340d2931ccdcd2ec", @generic="248c9c6ea8082ecb7ee7c76f03a1e44594ee63395f522817fbb009aeb1f77b50905e65a2c2966d1f4ba0d9e77cd09b"]}, 0x134}, 0x1, 0x0, 0x0, 0xc0090}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x189001, 0x8) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:17:22 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r3 = io_uring_setup(0xc6e, &(0x7f0000000500)={0x0, 0xfde7, 0x20, 0x3, 0x222, 0x0, r1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) 12:17:22 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x30, 0x7f, 0x2e2, 0xa3a3, 0x2, 0x40}) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1e, 0x5, 0x8b, 0xfff, 0x2, 0x6, 0x7, 0x27e, 0x40, 0x20a, 0x2, 0xe70b, 0x38, 0x2, 0xc49, 0xc0, 0x100}, [{0x6, 0x1, 0x8, 0xb7, 0x40, 0xfffffffffffffd38, 0xfff, 0x5}], "4c272cac432752ae9825a7505d81999ae951416ca5ed868ce312f50d9d428d8a63ef2ff7a5c7c2be98ca0f0c90fafea63553157831449ad8bf4ebf5204dbcbe4f363bf4fe5b65856469bbeb024cd4c6b9dddc0238063bdd34a1199cea8aad663b26f1948e2b41051f208d4d9d96aa63f3c99ecbd2908a431e0ff0d58a9c1b51ece82729beddcf00227d62894c5bb26fb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x808) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1964.855420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=40070 comm=syz-executor.7 12:17:22 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fork() r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') gettid() r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES64]) r6 = getpgrp(0x0) ptrace(0x10, r6) kcmp(0x0, r6, 0x1, 0xffffffffffffffff, r5) perf_event_open(&(0x7f0000001200)={0x5, 0x80, 0x2, 0x24, 0x81, 0x8, 0x0, 0x6, 0x2200, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd87, 0x0, @perf_bp={&(0x7f00000011c0), 0xc}, 0x40040, 0x5, 0x5, 0x4, 0x3ff, 0x3, 0x991, 0x0, 0x80000000, 0x0, 0x5}, r3, 0x9, 0xffffffffffffffff, 0x9) pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0x20c5d000) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000010c0)={0x0, r2, 0x3, 0x7f, 0x2, 0x9}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r7, @ANYRES64]) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x40010, r0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r8, r1, &(0x7f0000001180)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r9, 0x80, &(0x7f0000001100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x0, 0x0, 0x1}, 0xdf) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r2) 12:17:22 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_mprotect(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x1, r0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) mremap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:17:22 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x10010, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x1000) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r2, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=@l2tp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/245, 0xf5}], 0x2, &(0x7f0000000540)=""/12, 0xc}, 0x0, 0x40010041, 0x1, {0x3, r5}}, 0x3f) write$vga_arbiter(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='uRlock io\x00'], 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 4: r0 = syz_io_uring_setup(0x7f7a, &(0x7f0000000100)={0x0, 0x847e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000006c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept(r1, &(0x7f0000000500)=@sco, &(0x7f0000000380)=0x80) read(r2, &(0x7f0000000600)=""/135, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0xcbd8, 0x0, 0x0, 0x398}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5423, 0xffffffffffffffe0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:22 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f0000000000000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800030000000000000c00080008000800000000007714c2d88f63115e11fd73ee37f5b4f01fb86fda43d3a641f80beb2c9a98e2bd1691ee6318c946aad7724d76e1613c7d6a15f8a60351d33b53ab65f6dc39d5729db63c00827e4426667a8d57685ac2ab58e6e92395ec0abac4bbcf67d9aac74a682366be32e15601bcfea65916faa51d00"/292], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$vga_arbiter(r1, &(0x7f0000000240)=@target={'target ', {'PCI:', '1d', ':', '5', ':', '17', '.', '1c'}}, 0x16) fork() 12:17:22 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000540), &(0x7f0000000600)='system_u:object_r:insmod_exec_t:s0\x00', 0x23, 0x3) r1 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r1, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x1, 0x7fffffff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) dup(r2) fork() 12:17:37 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) recvmmsg$unix(r2, &(0x7f0000002100)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000500)=""/76, 0x4c}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/26, 0x1a}], 0x1, &(0x7f00000016c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001780)=""/250, 0xfa}, {&(0x7f0000001880)=""/45, 0x2d}, {&(0x7f00000018c0)=""/250, 0xfa}, {&(0x7f00000019c0)=""/32, 0x20}, {&(0x7f0000001a00)=""/136, 0x88}, {&(0x7f0000001ac0)=""/229, 0xe5}, {&(0x7f0000001bc0)=""/170, 0xaa}, {&(0x7f0000001c80)=""/3, 0x3}], 0x8, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001f80)=""/127, 0x7f}, {&(0x7f0000002000)=""/115, 0x73}, {&(0x7f0000002080)=""/89, 0x59}], 0x3}}], 0x4, 0x2100, 0x0) fork() 12:17:37 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) kcmp(0x0, 0xffffffffffffffff, 0x6, r0, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x40, 0x2, 0xfc, 0x1, 0x0, 0x9c2, 0x8200, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000002c0), 0x3}, 0x6c, 0x2, 0x5, 0x4, 0x8, 0x5, 0x80, 0x0, 0x8, 0x0, 0x4}, r2, 0x3, r1, 0x8) pread64(r0, &(0x7f0000000380)=""/209, 0xd1, 0xffffffffffffffa6) [ 1980.553725] SELinux: Context system_u:object_r:insmod_exec_t:s0 is not valid (left unmapped). [ 1980.557745] audit: type=1400 audit(1747570657.888:14): avc: denied { relabelto } for pid=41411 comm="syz-executor.1" name="TCPv6" dev="sockfs" ino=35178 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 trawcon="system_u:object_r:insmod_exec_t:s0" 12:17:37 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f0000000480)=""/100, 0x83}, {&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x4, 0x460, 0x0, 0x0, 0x27, 0x0, 0x0, 0x400000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) fork() r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500), 0x401, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r9}}, 0x1000) syz_io_uring_submit(r7, r1, &(0x7f0000000540)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r8, 0x0, 0x0, 0x7, 0x2, 0x1, {0x0, r9}}, 0x681) 12:17:37 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:17:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5423, 0xffffffffffffffe0) syz_open_dev$vcsn(&(0x7f0000000680), 0x6, 0x101000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/sr_mod', 0x400442, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r2, 0x10000000) r4 = accept$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000600)=0x1c) sendfile(r3, r4, &(0x7f0000000640)=0x1bb4000000000, 0x100000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000500)={0x8, 0x8, 0x2, 0x7cb, 0x50}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000740)={{0xa, 0x4e22, 0x321af3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0xa, 0x4e22, 0x4, @mcast1, 0x122}, 0xca, [0x7, 0xd5, 0x7fffffff, 0x92, 0x1, 0xac9, 0xffffffff, 0x2c2]}, 0x5c) [ 1980.638912] loop2: detected capacity change from 0 to 2103296 12:17:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:17:37 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@loopback, {}, {}, {0x0, 0xffffff80}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0xc, 0x0, 0x0) syz_io_uring_setup(0xc96, &(0x7f0000000500)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r4}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r8, 0x80, &(0x7f0000000380)=@caif=@dgm={0x25, 0x4, 0x80}, 0x0, 0x0, 0xb76a09e99d7e2e3e, {0x0, r9}}, 0xfffffff8) fork() 12:17:38 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200000000000000000000000000000000000000000000000000f10000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fca52e3400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:38 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:17:53 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000380)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x10001) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f4cb68800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000982b3f6ecc89ab117ed963eb8939386926f15104dead2940b11d8492897678f8012c7bb4681da2ba38fba9a8ab93fb8d86c21d"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x11010, 0x84b}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:17:53 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:17:53 executing program 3: r0 = syz_io_uring_setup(0x68d1, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r4 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0xc, 0x0, 0x0) r5 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r4}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x1000) syz_io_uring_submit(r3, r7, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r11 = mmap$IORING_OFF_SQES(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x8, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r11, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x2, 0x4, 0x0, 0x1, 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 0: r0 = syz_io_uring_setup(0x68d2, &(0x7f0000000100)={0x0, 0xb9be, 0x1, 0x0, 0x395}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000001080)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r5, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000011c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r5, @ANYRES16=r6, @ANYRES64]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x9, 0x101}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000010c0)=ANY=[@ANYBLOB="030af10001000000180000001731da925da8e81d2e78a348648bb55884ed4b62733d09a8974d7126800fc6a264fe12a15d412f3b9a82c37d0c1dec1145202e640537298fc6d1252a7ce00d581802dab5b01a6388828a1391d561ec704d831f472db1c2482912872cf103b25dea1bb4fff8e6885bab669abdd7946aef088b9c2c94fe077949ed6d2ed3f4982eec592f14aa001bb2f00618faa14bc620847bb38fe65fff469216a4488ab16830c5060700b3d903b96fad7dab7838f79523b10de4cc2ea6fa", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$TIOCGPTPEER(r8, 0x5423, 0x8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) fork() 12:17:53 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x5, 0x6, 0x6, 0x2, 0x2]}, &(0x7f00000002c0)=0x54) r1 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001980)={0x0, 0xd4a8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) sendmsg$inet6(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)="6e56e2e93f6b885efbc00b4d55adf292a00c81af455ca979996589e08d11153d867c9138135848c423613995ef333acd8448910ab3300a277fd4deb659893c6cc649573b2b0d9c465dad6520e5c734d6318adbc8e1e5f3fe6d3b09026f18425db07219c448e933a8b4beb492516fde508637129d6bd58668ea84ce8b381ca0d4327262f9927d2dacc25ea7c083afdaa0", 0x90}, {&(0x7f0000000880)="61986ef67b4285c81a6c21f3b644fa7e34b4ce2dcee0de255068f4771a2f3b798310f6a96b4e2e44e35dd16370032886ded35eda413cd88fe5435deff9518afdd61d3a24f4ea464e83475a9db40cc7399d377bf3c8e420ec963e2f02199ffc704e7985a06bafa9e698e89c7bf8ec1db488a45701f947745726f7816c70a780375bb2cfdc635d8483057d8c049501873d607e294096cd29f1d5ac0e6b682142e2bca5a7ed5dbecb5b060312dc40df4351a3cd054d5f", 0xb5}, {&(0x7f0000000940)="367943622b87a9148eaa8e65d103a784d634dc80015da8482bd451dfb97f249261355f8175b6d2bbf065b0185145ab2b38539a51ff7de503db4ed586a603eb9967166fbf35f399d0c16da292786c384465bb2638dd1c0b0e1cfa3e74f35bf757844d925a520d2fb30456fe71ee0f84f89e79c85bf5bdf2637b6336e8224eadccc8a174ed43e399a23bc6d449c69b8679dd836533bbb70c1f1af95d29fe570ed636a18b01e1f540f98986dff45760dd20864bae0658a9ff7679ed2a0f13e12b2d0d350e3681180cbd310ce3d7dae3d3a0bb70d2fbd4529b2dfd405b0b34c5844053ca7f9bd08dc37ba6ec48857e23a371e745d97fa6e1b29c01f7b937fabf9a545349fb035ebd3a43efde1dcfdcac0eefc59880d4d081699353fa32ed61910ef5da84276e210dde588d877eca791e090520734b9c08f2480bce48ad743cb27e401b6b8e67d5480eefb70c58fc067be1a1f2f153dc867e4ad4fccf09e8f026d1582a2ceffd6a68f8d3ef02ee3ce12e65f9c79c8ff00ac427f4fced89a625acc4164a0d5719e22dcf8fce51ea9ed2a71d3904e4424920b5459234b8f3800c254347fc8d5e06739c6c6eb888efd86c841f294257954146db7475ae58b3aed535862d897ac3c836932282867096955e42260f8bde987e39a99eeb918fe62513b273b9e31860cc4c5f4f724a386450f57a140787ad6733a897c760b321df10699e0f3aaf1748f31fa3510015879725e7a3a6333defc4f4ef7b72c2e746e01716510435e74604f07c51b8c44523d7954be51514736689bc70a94b3ed6b7c71598a210dfb12fdfb3be4ad404b076360b32070e85432d48ce47189ab2bdbc59b89744a1171b36547e632f92d97e8b35dbec98aba88d06adf05a13b023a741e2a8bc06c1c72f261e04a7dd801859ad06daecd1d7fd6ae45e5796c730abdda3d891a2be40855073a3773cb9860700d74b6ced4569a80223c63b237eaa8969f6fde23463dba376d5b2e74f768f78cbacc9a1be592e24a752d6b98628f79ee6bd58b9e40c0feeb000ccdc62d34cd9b165d9acc09a2b513c494c1b83597e6a6ba76163a704504aa812af4929e99151e79316377046bf95865d1ea09c1e19cbed4097ab0713d1b3684b26450cfc39a3cecb1dbafbeaf1bfa5ba42d942177eb605a12e0b5bcf2568def202594a3325f12b1f3c46383b14f8248baf869571e6d6fb6aad31cacd5c61ce3f31a78c815c8991db8b3664a63466b09b0a24ffccc3e6d3b178966cfa8e852db474cefe386b3eab250c5cc7c60ce13a7bc326f6efe84f610621428d6b11f268f84c34a0a5b7e8b736a0de0c845f3376a34f29f5878d83d70ac03c92be9d94d4f22030a31b519a8c5733df11995da24005c5bdac776a8b665453ef4d82707932ff6bb8e656b7c6efd15c2b60014613d3f249ec92a8668192a5e6e6d103e228df9a4fc0b8f0c736f35a7fcde8c72d93a23d54f6259d5e3fa99a41eb6df674491049265434bfa1a03b84d5f6ee2d225d9201ca60efabe8ca33b5f0316c6fa3d5d805868e389289c8ee6af124856fd6ac164626aaf11194d8130b2fa6e44876c40f6c7ece29e671fc5d939095d57001995093332123fe4444cf71f2a28769db1cadb48c8676b791080aaa47c37c810e01ebb671e5784a7742f5733aa4fed7a6be101a2f8171caf498c59712544a9cf05520b1c7934d3a5874a410ee3723ad9b7b6aca21b35988610c0f0de5acd53d672b9b82e37a44543ef9dc6effefe6d2608cc95e0a6c9a2c8fc3386c2f3fc0257fda5d915702801701956ac762fee9a1869687766986a518b06659de11d32b3babe54ba5d6733f6279302df03db431c46ba4695425a46cb41629ec723cff459c1b1b9be703ad7c2b5d875e933dba02fd1bd35d5edd2d333c8599300c61b0cc98c0e01f252009e8b7fcf4704fce9928d6b97fbfc68f4f9482627b6b29429feda4defc212e0d1bec43b15e3cf43f97a8a72469e577d9401d5ca2120fed2bee8c792880d6ef8dce9ef56d96aa38b6a293a1eaedf4ed10bb189d3ba26132b973e013d0ca49bfa0c4f358a1f00373c8dc22a7fdbf9551595315aac3e94f304753dd57144b1775ef217f1c6f35bd87a451a763c395e01051e1b3b092e91ee8cac6b6f2b49b078c84005c827bf0ca5aafbdaad218e8d3aac6f7a837ffb9cb0aa66f8249d5fd39d7a05f0e339b8770191ba492c9d080d86bd67a8e91fd068860d04e4d8e67abaa2f12d11bd6407d7e40628a82b6154e1a07a0e90334f14d58bbbf9dbb4811eec5a74b6fd599be173f16f333b4afc09f7a6fe5d8f9afedf04ff01db660566a5cbd13bcb5edf2c20b16ad15b09661edef46488241da8de4ece312ea2ec4cb04b66bb0d7c9eb0527d5c7001f985d304f01865d7ec56127be5c019c5c3b11694e01331a9801cdad754fae91d99ebb56d7e037c88ecaaa6455fe8493089d4d23404e52c8737c5259ee935a42d3cebcb973c200a3fb66d9112579e0054b20d3b665af4b51f5c92b2af3885c598dc99e5cb0c5b5360ef6cb511b4088dcaff9599b27399a9a3d143100aca3cab941c91d1ec43fc85b8afae77040ab9555c6f1e2faf46b02bbe51acecc8ad9758750b621ae1b300ab49cacfdaa9a79eaae8022b0019072e07109210105ca5b14bbbaa83f42de99652f2ef08886ff17f651ea1e6f5f940b4551e2243b73e01be18ca44e7accfad3b1e2b7296a031caf7e53ac5b4cb27d88d649f6ff6c3815438020cced2ce09e621548dd0a05709f58e229b1eb301d106e26a667667c5e1c2eabcf358512cbe90dc8c3692c843029e178f131c6429a53f80e44e37b0d5bc392f3c32ab145728d26c52c0890d9f46cfe8086305f48e5394ab18e72995b47a8d0b296a7dec2bea3599c5c0d0d6667cd54ba15cc6edc6e27fa8556fb014e6c411eb451b9d1a0575abc8bf3ee52bff5e9fcd4110d1f21316adbb4b77d0a1657a5fe3239a76e54a68fd47b539d99ca61b6a9c13f4d06a8d64923bc8fb5f92e799b64d3996b2bf4c8ea641ca769b25900be9566bb2a3df2143f1870068e3d24240e703111f57ce73fe06c771ccb70b6387a687bb1dbf2dde178a503c3b4d200aa819bf0e1de2e116100988f7733fa345e856efe3fbe88363dcf640a60b8b3a4c488de6fd55d659bf1bd8add0b7f61166a4e6b1ec98596db7d27a6218578561f473c3f8e8da1c7282f8999419186bd08f248a6a4ddf2ef7d4929f8d69cf5f49601ca33ffa01e8d8f97e6bfa73053d3c119a3a96c0ed2b84811c0d773355ddbbadcb77ce693b388c5b34e5fc21321a565a46bc5b2bcef07f5e1a5ad85fe7040abad88443fa7e0c9d895f46a7fb01d561c3cd085037e5a7a24ba55db26701dc8c4bde913024f09eb63599bff5acb85804a4aba23418293c4c61c0285ff5abb9ab205a4894fa884475bb7540774fb0076ad64cfa3c5f702d877dcabe2285d369a3d4011eff0cb67fca0f91182599f6fb27d9a236b4970038e30a2d4e10a999834fffeba9a29b8e8fdcb15d6349338514139a4db7e2f59f3cdc52ffd03dcc030bbd4f7852ff8c3180063d651d989d9afe25a3cf7ba933be8ed7aa5b860e33790f2f51e35c9c671cb1ecf1bac3e41b3a7fb643559ac5db08b4fab9f060c660e96d032de484f79a294e484311e899add62e20be4be2f6d175af62218ac5ca4a58e2f0129365e89dc6e347982076ad98e8f4a3518ac08ca6f0728af12dfa6f9f14a799dc40c821baa5d1d39c813f237347e84309212a429cebde65a8b53215655ccd4ed8b696e74fa54341c21d98d78edad7a8f9c02789a5dc7a579c69208bff10617cd526202dd6c66577e06b12636c5f601fbf4e9d32f3ed210d3e91cce110f999e2b18fff704b49bf8571b06f088734bf135be94205553f5db110b2d473a2276756547140c9025d6db0ca59c741fa830e6f34f5f01e1d3b5f5e2db7b549c3dabaf8ddbd7e89b716afa4e7a3d47d71632c5517b8c330985fa015b9e80b69ffa674bbfec13c981bb152641692ae418e66fad3b80496718ff386f61acd8400e1334812a47234dbd0ede8225abb2eeed2a63972149cfdb3c7bcceb7da27ade07cf82254bff4caba8e9fd97bf95d186d64cc40c93416e7991ed63a52ef99f8727950f3961e70ef838dd578399a8ea163477fa327859501b2a63024915c1cf5e8ce92e592817e041207a26a03a6d3112b9dd4722539ed7658037e78b11d3e1d797548ebabfe507ec22382a366a6ee97799968fe3e9e53b407a9879621559a0054b440dfef7d947e4c8d99b51926613a1433a9923da34ebda0492fd4db7b888c4d156426e27053e50cc48d055eef45dd4f40cef2949b14721589fff9b9c225c47e1704b31c30b15b5ecf182c51632d313eff13ba0ef9b6a43227588db563e6c07a449a144a4c1b0422a30ff9c45b3856119bdf68ebe2102b789a6fb5928de0b95267e1d59b55712964c07999b0729e1bc92afcbe75aa5aca95b3438a837c6a238956d1df6eadb90e71b25d2e7d74c823a6489781b1d1f177b1092d3799b46048ebbc3a6fc5baeb8daf799977bcc1d2ca9ed1b336371d520abb027a3d5b21a132a030356e5e66021f210dd54215325c5190c15d8be4cd28930bbe01e84c1be9040cc666b7d6e5253af3bcecc9584eee719f3f8be9d9af952e141907f1517256ed292495167753c36c8476aea7c5468dfbf89c8573e6211d96d8e9f59a33f0bc36fe38dab1a4149a84cd6f49857b7a313e4bb2c6180f0582c6a09e1cd94d0437a0e366567a0e803a8fb68f9509580f2b38bafd530959304c39115df26e277c007229ec56c836a96099e28f3a04ad46526e3ac58436fd4428a1b1b4709f53a87e081b6f9fa8bd36e6e2e64715b7a1162aabb1e041a59773442a9e654953493af8d914d980ba262416dd489ef14f9254d34f2b91f5bc8452b89f455c384151e46fc347870407f63bd80c994aebe636b84a0ea77c80fea2754d9b3e07383831af3acedae1b4f39a65acbc10e1263b82cabd4c5b7c798e3d7bf6d7e133d18e257534d74022151e7b57a3a725c6830ba82493728b0da6ba5054da2b7002ef5fc4f36407613178217236afdfca6b9d5c31229825c06737094007d8923e45057adb057a85f28c92a5859373cf544a5335ffae3e5bd49cf8841d5d4deac8e6647084d08b785e1f143579bd2548fdae63515d6d595fc2e8eeeb635b2b7623d288f3d6c30ad0753f789067aeaf7770d9e0c1f270e9bcf73f19aea263eb191a3ed4cb2b87e694e04c049be1b28766ddae6f0dae71910a64f4327cac464f8f67b84483cd730e35b70d778111f58c1d6fcef5f8c3f00038ee344579b241066dcfdcd57f5290ebc365795bffac5b73cf4d9b35a5ad09d2d117626366c59bed5db53e28bffff313a90885ec3f3928f9a6517aab9e4ff83fc3a8f3685c2bdd526eb9aff3ee2d496733a2b06c052052740b29555504921154f4c8cebd6cfe9ad9bb8dcc53d9681a2694ec271f1dfe6532dc5f2b0e5db9c98719b57e766c552ac197d85c4ba4b8469b678069b36fe7e0c9c251778e29b702cc7404d3930a6687440e32f3389752199447989d9a930ffdefe8d57d67f46e080146934b477795ea7550159da33dd63a11cd235da9183eece391a8bf482cda56b0918233456ddc3deb98c4d00c8689bef3baf6bbcc79260cd0221ea1ccf1ca2fd148fb3b3464d53aa74dd1d05e49a131f82b987decf2a0a933ecb4e59476957d3c9db3a71ee362e086122496ee7ee095d2f7baa82c999adc6935eca68dbb04d3423f4", 0x1000}, {&(0x7f0000000280)="091f1c83ef289cbfd82bfbb875aad0b5e9803d9fba9a5962a9667480ea033bf1e7a7dfda2026", 0x26}, {&(0x7f0000000500)="3cce02fe68db257c29b56ea9cb407e6942556721165b55c89f53d240030a923d2fe90c73bda9cf1c408c1f75e6b67e3d94bb91665272403c4c21c39d540d7532d1b1a3db58cf5154106670e69c04f69c9ea3f64becfa6ea9ad8901e2ddae83309e89df3d325e0dd1b19b9d", 0x6b}, {&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000001a00)="8baec1b731d531fc788901a7ef99fce816e2f91eeadd5e76a628e4b58c60bc56e3b661aa802da46d8e4ecb510bf505ae66e7b3e38591f2431a523627c5842beb8ae400ed1f5e90b4e3e1ab20ac553d59c15f4ea197b3aadacf4855427f8e864500ff700b5b8b5720f85660c1bf2e8a579b2a9deaa5f610b3707e33d03cc0eff22683e0530bfbec7b84d51dedeaa2a791c4d5d2", 0x93}, {&(0x7f00000002c0)}], 0x8, &(0x7f0000001ac0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fff}}, @dstopts={{0x110, 0x29, 0x37, {0x2, 0x1e, '\x00', [@pad1, @generic={0x6b, 0xd3, "e83742c74428251419a107f9786bf45fd0b43207ef8f6fa1bcfc38ab14da254308b0eae749a6540ad137b50bf743d55faeb8ab542ba490cc5e1ef06f11a2a6e6cd854ea18e64d3b0ee053c48f4efa3f5f11d71172dc89152948db70fa92d03627bfa0048935a10039c1dbb79f3210157ce45cb472bccb8914b19683caffb05c9b73e120986c56170d4195166cc2e1e9cd250ae9c4d6fd6cd66c54dab94f7d532def4b070d28fd20ff8064070021654d50c4007a8dfcd0fdf00f36b715d8aafaabc2e4b97d1aa97a5d0b789f1adcb079885b1f5"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x3, [0x1, 0x1]}}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0x88, 0x29, 0x37, {0x5c, 0xd, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x50, {0x1, 0x12, 0xff, 0x40, [0x7fffffff, 0x401, 0x40, 0x6, 0x40, 0x1, 0x4, 0xffffffffffff8000, 0x1]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0xbe, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x218}, 0x4000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r0, 0x0) dup3(r1, r1, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x227) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@report={0x6c, 0x20, 0xc, 0x70bd28, 0x25dfdbfc, {0x32, {@in6=@mcast1, @in=@local, 0x4e21, 0xfffd, 0x4e24, 0x0, 0x2, 0x190, 0x180, 0x84}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2b, 0x8}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd26, 0xffff8001}}]}, 0x6c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1996.122663] loop0: detected capacity change from 0 to 2103296 12:17:53 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:17:53 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000003100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = fork() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES64]) r7 = getpgrp(0x0) ptrace(0x10, r7) kcmp(0x0, r7, 0x1, r3, r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001d40)={0x2000}) fcntl$setown(0xffffffffffffffff, 0x8, r7) lseek(r3, 0x5, 0x0) waitid(0x0, r7, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000001c00)={0x1, 0x80, 0x0, 0x9, 0x40, 0x2, 0x0, 0xffffffff, 0x40004, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe699, 0x0, @perf_bp={&(0x7f0000002e00), 0x4}, 0x20, 0x1ff, 0x6d, 0x1, 0x0, 0xbd61, 0x3, 0x0, 0xe29, 0x0, 0x9}, r2, 0x12, 0xffffffffffffffff, 0x1) process_vm_writev(r7, &(0x7f0000001600)=[{&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000003000)=""/234, 0xe0}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000001c80)=""/179, 0xb3}, {&(0x7f0000002f00)=""/232}], 0x5, &(0x7f0000001b40)=[{&(0x7f00000016c0)=""/189, 0xbd}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/62, 0x68}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/169, 0xa9}, {&(0x7f0000001900)=""/30, 0x1e}, {&(0x7f0000001940)=""/254, 0xfe}, {&(0x7f0000001a40)=""/100, 0x64}, {&(0x7f0000001ac0)=""/5, 0x5}, {&(0x7f0000001b00)=""/6, 0x6}], 0xa, 0x0) 12:17:53 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="a7fa43e895d5b4f7ebd3d9ec077079f806c0a76f5b0a110d2bc69a533d9b56ffc57bbf48ec1ebd638fa8af09dbf1"]) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0x31, 0x6, 0x80, 0x0, 0x6, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x3, @perf_bp={&(0x7f0000000080), 0xb}, 0x29, 0x10001, 0x7fffffff, 0x8, 0x5, 0x8, 0xec5, 0x0, 0x7fffffff, 0x0, 0x80}, 0x0, 0x2, r3, 0x8) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r4 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:17:53 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) openat(r1, &(0x7f0000000240)='./file0\x00', 0x8002, 0x11f) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x20, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x508b0f63, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='/dev/sr0\x00') r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) waitid(0x2, 0x0, 0x0, 0x80000000, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x5a, 0x5, 0x1f, 0x0, 0x8000, 0x44089, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x9}, 0x0, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xb, r0, 0x10) 12:17:53 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x80010, r0, 0x8000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r4}}, 0x1000) syz_io_uring_submit(r3, r1, &(0x7f0000000800)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x100) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000600)=""/242, 0xf2}, {&(0x7f0000000700)=""/32, 0x20}], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 12:17:53 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200000000000000000000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x1, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000380)={'wlan0\x00'}) fork() vmsplice(r0, &(0x7f00000011c0)=[{&(0x7f00000010c0)="beba93ea859e0a9cc6763a6d09a47da22c7dfcafe43265c2d9b76ed01c63ada3dd6834d0283a2ad539b88984c9070b28c3385871fe4e9ab599", 0x39}, {&(0x7f0000001100)="a4b31c879375318fb0aab6834b4a7b1c42d0491a7f540cfcc763c5495e6c", 0x1e}, {&(0x7f0000001140)="88d7834b7a549912e262f0e0984d1e9a9b8cc74088806c743032e4ebe7207086a0434ed15717b3e29f7f2306aa061bda6e51506176f2d5e0c5e7edd001b523b5235bcf04960d41379ef490", 0x4b}], 0x3, 0x1) 12:17:53 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:17:53 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x0, 0x8, 0x5, 0x81, 0x0, 0x1000, 0x40000, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x9}, 0x200, 0xddc, 0x3, 0x9, 0x1, 0x5cce, 0x7, 0x0, 0x8, 0x0, 0x7fff}, r1, 0x10, r2, 0x1) 12:17:54 executing program 3: syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x2, 0x397}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 1996.719555] loop4: detected capacity change from 0 to 2103296 12:17:54 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) copy_file_range(r2, &(0x7f0000000240)=0x8, r3, &(0x7f0000000280)=0x1000, 0x1000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x324d}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000600)="845ce10f021622881c25654b8827b58f3c151f9ca894fb21a220695278fa57db13c2a7f5548b8a4e049b10c2a77da2e1f2eb9fd6b9576b1c3fd5536d1c940a9c44b3cf1d649c5212b0acee6bf33b7e3c5604a57edfa06ea05a0a97d86764734695073e3a5cdec971ef1558e2e0739d036610f2b6735bf741bacac6b41ccfd3ff290e6cc65e87e3cf9c24a435e2753682d5d6b3fcde657e862a1bfdb613200c76936e1c6b4681957727e746dd75134befadc38022ee3ecf81385ae87abbc437ee127bda3172e101851746027475f9bf5d40a71347c3d09be661", 0xd9, 0x76) 12:17:54 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:07 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5423, 0xffffffffffffffe0) readv(r1, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000700)=""/86, 0x56}], 0x8) fork() 12:18:07 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() syz_io_uring_setup(0x3ac5, &(0x7f0000000380)={0x0, 0xb4fc, 0x1, 0x3, 0x108}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000500)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r3}}, 0x1000) syz_io_uring_submit(r1, 0x0, &(0x7f0000001c80)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r2, 0x0, &(0x7f0000001c40)={&(0x7f0000000680)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000700)="914da174f5f0d06b005541fe8feaf778df78865717fc6b994fb7d93a3dae3af7cf7b04342281b97c26d3e4a845fd5506e7cd7fb4b4d5def08a8dfdefd467e13f39ae523903382f9259e4d06bcd0af9ff133e80c572e56435afc2078eed4653964d22e6161b898489b248b7fc24a8cb637228fe8ffeca443075b3d066f051f0df91802f92278a734252e6b2715d42765febe5f9", 0x93}, {&(0x7f00000007c0)="8fa69dc5cfff51177ffe929dbf3015f0ce0a4c6d2ab6d86261c2a93c0dfe94c23fd27bbda4c5a2107c6f89922ebb36abb816ff1f295bb313e5910ab8ff48f9889504d26bb29c4a48df36f7d5bb3153d1433a6b18c52e84afd5de04f312dd87667155e4917bd93634bbba8446179f78e4678fe6cc3c7f926f14a009a18272da9129312730786c4abf88d4832b2a1ec9636433e1155735de30279b7d5a6d0514f99b6809b614165d6c8157c692f1b59b365d1ecd09b340cd537ccaf1350dcaf5a5ae3c3d5299b61bcf65b0c2f2cf30fb9b845f5c01d618cc", 0xd7}, {&(0x7f00000008c0)="ce0ff54225638d1641766e1e96532da570c1de55eca7712804227a7cab52eb8a6014008e41fcd2f75799b69ddef971269266", 0x32}, {&(0x7f0000000900)="c317f45e7350275db34e7298e2d10493705937ab182c103425f1c188bb701de6737e3837606afd9c29dcd0ad29d51a51ba03b2465c6a5272167e77887e5dcf2e123ead2741ed53bfa077d672f81791a64e17ed8ceedf855a82a78bc4", 0x5c}, {&(0x7f0000000980)="d7acbf7cfbf9e1a4d33810399548ee1a6c07dce01c9392e88adc6e306273b94b1ecec29b0d11448f8329003dbea28b487e5c8dddc632ee6d3ade6b0b824ecf6dd2d9de5a089ecc89ffad48ab62a34020f44e4be61d1f2284552b", 0x5a}, {&(0x7f0000000a00)="92a903bbc511af927f5128a113474428494ae62c6634d4", 0x17}, {&(0x7f0000000a40)="13c607a3a2add24318c4dfe0b3e9261eb41ceb5a1473f075932bca97fcb501114ee38c912539b34d04c7708f2cdb270484a8d8f98464132b5c21c0", 0x3b}, {&(0x7f0000000a80)="66013e6eb14a9b947ff8ed8d18fa0b80621450b8ff8963e9874a6fe72ba3f4ec08c75a4e8c086d51ddbcfca5c5fc5698f9cec894e976695c8172f3a7beb8dc72f7403e6a3f9e097432292d827558645bb6a5b8e8bb4451c7d1b0211c177f3a39a0bf84b54fa799cbc40324c5241ddcff45ef46fc706e79e861bcb2d4b3d39507bfae8ed8635ff81279d3df19c196f9f58c61721d10bc70ff942c57d3442fc3ec847803beba68ccf27a43b9055cde32b25a9fb4f46acbef", 0xb7}, {&(0x7f0000000b40)="8494e5f639", 0x5}, {&(0x7f0000000b80)="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", 0x1000}], 0xa}, 0x0, 0x4000010, 0x1, {0x0, r3}}, 0x1) 12:18:07 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x1ec}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000240), 0xf) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:07 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0xc0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x1, r3, r5, r6, r7, 0x0, 0x1}, 0x0, 0x0, 0x10001, 0x9, 0x1000, 0x9a40, 0x5, 0x9, 0x6, 0x8000, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000861d69c6573831d05426299c4edb04c964607e3f2dfbae2d76131edc092662a404607c3526ef094e88a9d5fe95461ce599f80af2628ad564b90c247adb6ef6b37b8c07c5a893b5495dee2dc51fc6c82aa6e4b3a8155805a48f71eb132fb66e68291f6690de113e900da798"]) fork() 12:18:07 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:07 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) write$vga_arbiter(r2, &(0x7f00000010c0)=@target={'target ', {'PCI:', '12', ':', 'd', ':', '10', '.', 'c'}}, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r5 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ip6_mr_vif\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000002380)=[{&(0x7f0000001280)="8663b64389c01881215aa5531e5eecad4c414b9602f3abbac7ac1d9c999dbbed101b9e3c717c5e33367114680203c30a93c9c2826d910cd26af10d78bd57a2025c978848b4d9ddee16bb1061ef2cdee3bdc182c89fb3a220adf166f8e651ae7e8bfaba61f3999a578c69602eed37cd4bb554f028de62", 0x76, 0x4ae5}, {&(0x7f0000001300)="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", 0x1000, 0xfff}, {&(0x7f0000002300)="f41023991d9e8de3c25101701d2144e017363f26436a9ba95e64772a1d1425e93c7c9a44e794328ae694b04d6761d81c837e0a147f8fd0ea80e02e89daa5fb43575ab60a3596b1993e45b0c24711e2c9d48a", 0x52}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES64]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000380)="e7c48a37e33825dfb6d93c3e9842a8cd", 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002400)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c000800080008000000000066"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001100)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6000, @fd_index=0x4, 0x4, 0x70a0, 0x746, 0x2, 0x1, {0x3}}, 0xb41) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0), 0xf}, 0x0, 0x80000000, 0x460, 0x0, 0x0, 0x1ff, 0xa9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac0700"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:07 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, r3) r4 = getpid() rt_tgsigqueueinfo(r4, r2, 0x4, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:18:07 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000001f000002000000000000000000000000000000000000000000000000293a3805f54a760acf8f34e6cdffe043ffa5000000000000000000000000000000000000000000000000f44d2f509500000000000000f100000000000000000200000000000000000000000000000041f90000000000000000000000000f8e0d1b7e1200000000000000000000000a"], 0xfc}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x16, 0x400, 0x70bd26, 0x25dfdbfe, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() waitid(0x0, r2, &(0x7f0000000240), 0x4, &(0x7f0000000740)) 12:18:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000380)=')]!*{\x00', 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:07 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x200}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES64]) r1 = getpgrp(0x0) ptrace(0x10, r1) kcmp(0x0, r1, 0x1, 0xffffffffffffffff, r0) openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x204000, 0x6, 0x4}, 0x18) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x3c2, &(0x7f0000ff1000/0x3000)=nil, 0x0) 12:18:07 executing program 2: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x2, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x8, 0x0, 0xffffffffffffffff}, {0x3, 0x3, 0x8, 0x7, 0x9, 0x100000001, 0x4}, {0x100000001, 0x7fffffff, 0x7, 0x7}, 0x1, 0x6e6bb6, 0x1, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x2, 0x1, 0x81, 0x0, 0x37bb, 0x9}}, 0xe8) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:07 executing program 6: r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:07 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x3, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) sendfile(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2010.392505] loop5: detected capacity change from 0 to 2103296 12:18:07 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/119, 0x77}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001300)=""/249, 0xf9}, {&(0x7f0000001400)=""/115, 0x73}, {&(0x7f0000001480)=""/179, 0xb3}, {&(0x7f0000001540)=""/217, 0xd9}], 0x1156) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:07 executing program 6: r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:07 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = signalfd4(r2, &(0x7f0000000380)={[0x5]}, 0x8, 0x0) write$vga_arbiter(r3, &(0x7f0000000500)=@other={'unlock', ' ', 'mem'}, 0xb) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x6e, 0x1f, 0x7fffffff, 0xa, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0xa32}}) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@getpolicy={0x8c, 0x15, 0x300, 0x70bd26, 0x25dfdbfe, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4e22, 0x0, 0x4e24, 0x9, 0xa, 0xa0, 0x80, 0x33}, 0x6e6bb1}, [@extra_flags={0x8, 0x18, 0x5}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, r5}, @tfcpad={0x8, 0x16, 0x33}, @srcaddr={0x14, 0xd, @in6=@loopback}]}, 0x8c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x4002, 0x0) dup3(r6, r1, 0x0) 12:18:07 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES64]) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x80, 0x0, 0x400, 0x70bd29, 0x1, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x80}}, 0x80) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000001500210e00000000000000de767b2900"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x4f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a018adac15a8fc88f9b99db30592eada"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) 12:18:07 executing program 6: r0 = syz_io_uring_setup(0x68d4, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() [ 2010.635626] loop0: detected capacity change from 0 to 2103296 [ 2010.648813] loop0: detected capacity change from 0 to 2103296 12:18:08 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x0, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:18:08 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0xfe, 0xb4, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x2) r2 = fork() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e00)={0x2070, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "ab6ff5310ed7f051ed52fb093ec12fcceab907b73ae2fdf7f1f97054b1d3218dc548d823a07c608111d2edccd0036af2c9207fab35dd904082c452486613461f5c667eab85ce7c55336a97bce1162ed16557f0bb63cfa42f501936eaad948ba5ee08b265335b30fcfa8ab9d43b8c7166b3b4607f9d2b08469ee4077fb53c155b4d1570f4bb545b039598a32026e5802915b4badc4637c2fa0e00d909af2f2d62e509c5428d9ac4b35096f5365964026a52facb319842adb3c6aba1d597390d52f4241bb7a2d70d64d3d52c8ef9e43d930f3fe86ee23f53c0bf4b059e8b71b0876cc4845317798aebee4bf9bda95c58b3e8fc744684b2fc9d2b684131484e00fae74c28602906f2aed492b8f6845d9c3c3b17bfc3e2a02fea15d56b754de4030e64e11fc2958237b2781ced6d06e0666ead17ad0bb0adbacdca07ef4beb4dfce7de5b33e4bbf117b063f4ef444f6bf84ce99a606d88167f920d1e54fa83bc77ae15adb72766db6b0fc416337294e13ec622da30cb57b33e53ebc762c5d764f5cb49d29e1ad352bff8b5bb672fad132a6ebe4763ba23cff42195cafdb53744d2e6518aac13340c1b00bb9d05a9aa6a2f954dfea45789ad44cf0d9b4f42ea50dcad6097136fb387ad66363c49dba72228d08bc0904b2d8a7bec5a68e460b89ba062a744d5c4061da195fb594c7dafea49599beba7613f605050be15f243c95c564b6a002f9b7eca449127f392b6cc820c1a900d44d58985d3e450717a98c3a9c79b53844426a4137edbb3884bef40ea6f3174a95d3f7d95518dcc15126aadbf93e1c6efccf02d4e4a93a38041c7d922b0bc255a4e1fe6c95dbf9716ed62b56e00a4bcdfcb6f4479676de5082793bcb38962681d65f20a64d25c09356ae545b66e040efbfed048b7355025d99333c84257bfecc97ed3f8639241bd0803ce43f43286d43cf2e9899f24278b2c87decb6616373e41460fe3d83c6c1af187b33e36101d9dff64d8b2baaa3e5ac7708ace5bb69061c117b09abbcd4b4a3ebbfe18bc7e76e5fcb54c9f898e1084fe890a4639c5b51761201cfcc817b095d562fbaddd4c2f62602d34fc0413a0e6b34c4ca8cbc7a8453531c8dd2c7e0b3cc8c929efd9d5003fabc5e6ad96e9a6b97dff747c003dd7db3bf32666f8d43d27b926d660f072dcf6f8fd75b9088040d9c5d3bbc706727bdd3b3551a22aec76fce4b18a15d91d97084dbb7826d97731514f0c71bf51ab3cbb7ca3ad0f74637d42517d7577bfc1ee4387dffb7441164b79f6a370c5ac251b1bbb06ae7e0285ff5714257f80c529361b20ad39c41014f535ac4d53393b411c2135a97bff08313246e0270b9a43142ce5f669adeb4ee800824e631c957dfc33f7cdcbbb8bf10d9605bc8c47efc427006200dcea0259b48307b26d6912422b3cbd49b6d81b93aa23db81b4c04f18201640c475542817c9d24e9b7e0d66dc72992d07b8b7e240d3213b36f5379c8479274059a5e44f8a92b54785a4704c17a960c1cff6f3712882440f9ddeb8101d63e41bb000f943088dcf977336d6c0aa4a0dc89d593dd509583f55cb089c181d51dd7c0dd7b41be6bb136a8e9a7e0c22f4ada54d2344fdf9bdc8a3cce8d01b86edffc100a247c18e4f17058e40be60e7f03697a1c75d91c6cee2608b615130588eec0be8ac34fdc995288099dbfea230814e91693f940222cfab0c230f02c239e0fdfbeca4eef46775173a6e73e3be24a67d494ae87311bdaaf136ed33a9d303810b2ef69e1373c141337099ef5589468314cae0d3d44e959b718b0b80b05d44c9ff79b03340773fbb3550625f7f2665505e5887d3582d6484e4c4d54fbd4377f9109991df6a718c7f2ee8abc0c4935315dbe9570940a01dd6ddf30284bd2dca8e8f5c761b957cff38074399a824f2d5d37a463bccfcc25bb823a4fa6fe3b30dd9ac6ef6d15641e8aa3ff2a217b068dfc69713aed5b4e19af1f7db33b78a58e12333586b34d0dbe7a07745a34165d0585ec83ab426094095cc77d02c64a1afd2c3e72e951680661106a8a734472857a2d46b2740394e5ee93f920c3223f1d8bfc88a9c4ce1656e7a5420fa1995ce536d769c799f9ab36258e4b868b8e3eba38012ea0429465db5280824e8d95ef956f81f9dc635a41c15f8c099489518701ab37c9e34781a98e4628bd11ed95eb9ec9e61ea35232c3249a9710116776efac33b923655c134bea61565063228f2e43a40aaf1de654c6a5c7f2385ea75f3b088ba5478dbc5410c9954a0dd8f616b96ff59074bd9134f372826231489f75af73d12ec133ebb8ff5148c2e06be2307d5bf26a706b427adb4961509e675e8d9b435e10706f0b893253f744f387d7fa403a10242e4034e5ea5f85e2baf15235b5182333c79793bae6a11ce6563ea0702244bf9e08c8488d2eb8abe515c74b0d05f45a9805079fef555351afca920a7b13013cd6c6ed8c090df5f2c42f7ede2e9b055416c379c1ce75b41b26fea46a87643d294b6aa8ccb87d723840a69af492a8e52e4e42a857269a1e5ab2041322494bba19b020d08740d1cbab40d97f52ddb20f3cd9c5dd7d911209abec0ac6f895b2c1f6ab8dc813d35457c51069bf366d2c6e8bc4bd9e77d78c02b9db2931edaca7df60cce1f58af9a8fa135c52ce81012c8dbc95881fc0c53c676e45c7377e977815c8e71459a1213bc599870f2dc0de14b4db937409793911e411543f29236ac6c084abcf05df9f833421651423b013dd2ce30919e5b1ee4daa531656e48bd484e2755ae82b4463871c5caf10a5d59eab63224a64f8256de14d435fe43ff8c60393f0b4193fe4eb3d6ef2711d8ddd83109123700c5d90c906cc6ffa3889a2e48b908b309a7ecc32527f10e294017ab492516967be43fa24cede92a2cb29df772823026500c6bbec1c78b253d2c7456166d7a69269f5ae9da7b960ed508b08afc2f8e696915fc718d73797f7728655275feac3155bd05c79bea6d8575ef74515f29be0759120e8c9a8eb8ec36fb28374ae43073aa039873487ff12c07e30547c9ff673cb48ea4283f9c70e8e572ebe5e43bbcefc4c607ced1b9d2be9fa31bcff21c8bf7aa15a6e4feee9d649a2e6785e635275dc298b59f069287e3f3e1a3a6983d2bd67c6bb1aa550d00c845ee65a2b486601468ed3d443b4cfdf3d0af2e652faaddd92a5a762f0a752ade1b732bd840951a4612314c9173f34b3e5f8e5881dbd30b541b031437b289caf2afb8acf680caed452d82e29a2d37f55671144719cf941ff622ff6d128ed7ac3a87a0636e57b72cb077c90b6013f6e188ce5ed325862a3ae7d8fe5febc939a7d906c2eb993a5170fba00632e3cccf25e86abed1db96479262dce1898d9ebe6f78ee25389fdfb10da331de85772e803ad92e691fbdf2eb803281b278a58f0233ffc3fc11e167bdcc03998b67b549d95b309554fc471103a575cb45043c144d0bd95a9209ed95dad8d6d192921ea42a8b50f8b9083203dd41f67d1b47502ea7c84d0fdcf2b66e7306845778770571ccf15c3cbdd7dd241114d2590300510195e56de6adbd0fb07c641419c2ed084d4b8a6ed1adaad84549e0d7366f2b44c5b6099c819a909553aa039df37722f81257ba2f60f775f444a71f9cc7e2c91a0bf301e661cf6e32d002b9c546a4554c27630caa7d862dc3a796c36d447618bf37031df360ab36052e99613aacb10aef578f394b62a0f13353430579a28cc9580abddd4f2881691b01acde0d471c83d57a87e99b2b8c1caa2210d85eb09d9d463fb9a57805a2bf352a6d55a6d1db9c52212611080774860d10f626361995fcf429c258d359faa77145be35fa33d10d9f2781d281c8cee4691653e131e8df1e2dad5d16c24b21f053173351ecfa158e8fcf20d3cf311523bbb5d6b0bb12fba1b6a2e1b5d6cf28a2bc18e000d99960d2d10bd3548510027caf2b3b740f29c0a6ebf6ebb0259c3933910e6da7a26fec0e31d74c99fd7e254128d27f807f08a52278061220001ec69a2a7aa5bc888a0527046708e7d2968f349ddcaddbe31fbcd460c15141271ea95f6d59c2dcd59e90078cb282417d82b92d12d839ee7d3ec1e9bd782181e8030e9771fd418833fc8527f78f00144e63709b39b021a3010db52f12ac27c1703c8efb73624ec14f28bbfdb03d204174d6d9c8465f64542da431c6668cc80018caf20ec15f80f1c73c4b78c9c44fabc2912ad63eb9d82111dcbc5eab5e96fac1a6016ec31b24f713106d564dade836452c6bdee23e9766d29f72ba1e92021f97cb42f68b7981da494679b1eb90fe124b2bcb6fb4bfbd56cb1e9e9ce61f16acae171aef1189041245a1bcde4b15823ba8dea56b366f4f6324beb63c3dd89f9aa9da70dbaf9cd903d8f87fab9344f76f5cbef6a3bf3b8f78158b8a5628994d76cd7f549fe51a40c1f5a50dc521ab4cc012d5c981a4b739991345cad5cd42bc1fc318134f81bcdbd7e1f460b9fb143351e2e07903dc191cdd4f15c5a033ea91e6761ed1a26b3b69e6eaa663015675b9d13ff76951a30a26bb05c5407a35b45b14a2200ddef6dfc19f01dfaf201df5c51463b9bb26610464fa945405a48387a19ed443fb46d8eb97e6682d6092d9334832254ec3ab90d3f383a7b0adb4960652603ce8eba10850933d38ae3cc4dc45a40b270c524f07819fb7f3df436edaade9d16b45d33cb572f4b8899d2b3dc468f297757dfb8306656b35fb25c0e98ca82c4586c9cff8826ac03c5d394c460c5dac6fcbbefe2c90864c9415d39a364d75face3e8460b2bc9f3c6811755e5c62fceed287cffc03cb208f4febb54cf9bb0c5c725c4b095a8f115edc090054fbac19dbba9ee8593b21003d5adf8616d8c00e34346fa97ba47e82d5a468553cca083bd1647d05526f7f19164c06a77ac3c3a8b6e1f0e956d7ab65e6fc5a95cdcd2db8f5d8975c4d1fb730cd3eddc2c96c993f76ad1872502d23a38c98f71a7bfd34839cf00244df34f6f98f98f41e5c723e00f5b96fb44a370ede9543ab63ae5ef2b748c63715b032016da4c1e26974a250a545bcd61a1a13ae887367f33f580d332959ab63961c12f58e93059445fbd79c5b63b43e76ebbf9e2b5c7e45687c0d9774de7271f1a7b23619d093dcd0f46bd80f7d443b0db58aa5116096db8f8585c74b8745fa0af4147279f60887b012447c78a99ceaa2bf0d8dcf33d4f1a894970e3d47045001b640c9df75839ac03c91d44cb485950fc309d8fb0315535f31aa1db77e91f2664d3adf0efaea30f3ac656456b29fe4d1a5378abfdb0cf2136c9b6f0f68c9b7b96afb8ee4fffa42256b9a0fead8b8f1aaabcfdb9207af323e7cc481cd90598d91752c464081dcadbdbaaee7c66a120ed4e64a705fe0793e571fb3e7f8d235b0d806ed41359a9a08ecdee3124dcbebe744f4a711c20da5a1918a929715b9a87592407c18138207bbf9e3db94d4c82def5edcf5fd8c74fc33f4d7d40ae48d890302227c9392af042ef31d1214e9d51a5a5c92b002ca5708411894d0b07c1aa4508d5cbc0c45c954751efe5f33b01df38bce46a987663280a5b3edd7ad6f101e19e625c672f9042ef9b292203f3b82cece1ff939aa8a1cd3bce70649ef81bb7f44933c538f258f19e9ed967f201886bc15531909da1c760c608e4f0e6152283a6fe0d57058190fc6c13e0c27a8cb81c514c014fa0cedc108fa962117b4eba476a04ae6cdd019ede73649173cd3b50200020836f4ae1ce5e932ea88c3eab92ae8186143656486ace620b81be25b9ed9c21e06b0b1532831f530d6b9"}, @NL80211_ATTR_TESTDATA={0x4b, 0x45, "3463abd8df00ea686afe24d10ec3d11ac5bf631fa5ab7a2237f6175f30c5ca71ce93d2ee8d25691a906716d5009dfc3d4e39305a28d55b67dd510fc95cb00c300b8f931ea78c3a"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "39f0be6ba10b447facbd93cd2c31898c5b8189a7e03b371a6cc7c6a08a8a3211234f9405a5c4f2cf774a9775bf29951dadf4c076d230537b1df8a3b152df586cc5f78cf91ee165f0bb6aa86e725dcba75d81c609678b83d024fdbc73d3cc870aee13dc2fee62408ced016f55d61b65f0d0d2c6cb00ddda82705bc83728f56468703a856453bec8d32e404667f434f45146f5664f431502a90716dcde4fec199d590eb9bd99cd253f939efa8c548af2c467907c89023f965223731a9b70c9f674c0160cf2043f3ee08e3229e42e7ff16268506390f206a4a1815938dde5deddca42d49e58190332cf0764c03a434e0fa8354ed5433b7b65f5c3dd4745c1645c9448975025b2a0552b4c2dcbfc4952fb2f9eae83fee7ba1fc78768b677a9c00551ba4bdf669cdec8ac17a0bc9e75956ebf9a2751b7813956a1d3a63eb488d3136a3708515226d4faaa845e103782025c72101684e9b62a272e443089a6cda60de89be94f0db3eff1b550cab0aa4a813b972908f902f6615c45bae7b301761557e8be9ef2c005ab67f7552d43cf8017771fe7b4cec2b7e3e357ed172ddce7144d7a0e5c487f581d3279b567a42cecb03e42d7c9ef8e2ef2e7350654dd07b4fc5673897c5190840e2c575b1d0a3bb325b49beb6161f2bfd4582bc7c57c40200135f4626a599985a123898ab343c0a0d09808b25b35e2be7e8adeb5271ddb1d9fede86b535585f58fa497ebf4b401515d6c82f78fccb4d08a805616b597c9201a61be01b9744262075fca42a99fad8f09f1cb1c2c1a73398b6cee15323023b44b960cbcd7758be7dc612bfc3b838fc45130c3776813e0e6457b86e4f615cb1df8f89563cf8126f5fba9d4ebd7feb6d75732686924913049eb0a5e7d176a3b347c925fe7bd0e9fc6e930d38f515d732a0c3305dc7e14c4f0582685eff8df95aed8833c1774aeeca31dd39ec29585a03ab2bcaafcd566b00adbed577772da78f873bb2d55b3f8ddf16e7ed53675aab42319ec26465048516e5e919db324543231178d25d571c6b5b187a8876b0e2d717514537ce9c9b99caf884a2a9f679293acba6df1176c18cfb0e3bd1d7cb0b471660f635579e7dd57c48be2c70b059024ca47d22d990482d1f40f6a0f893f99c549127dc90f644a664907a8e1247b86858c6dd3349fba8434766b5a7353d66d7372c4f3cb5a911bb1074dd22509448144f421e6795bc88dc6803c70c8b3b0f25e1e18289743e6ce68e014c3313da24fa776dda8ecb4498b2d0f129721fe39b5e0d0a23c2c86397490d81c8a047ace06e5463d776b0d2dd13b98eb02aae3003061980a4b94539c5e6516cb4b17cf4c3c5346479b57944ce2199ffc913e21271c25f9340be4364fb5ef3e4db338bcea7621c97a02aac538114dfcd655e6caf6f3d549a83775daa3337e9895df959f99eb1485c28f61d8324812b9e101009244937e43ebfc44ba07fb47c29719c3715ab8696ebd83edd2ca786165f1e33de41541444a7fe2bd8ffaf742a54d3a32d40580bac77e06df3468fdd0076c913294673b27552475868fd59d43b20049109b70b28a125fac5e1faf161140abe5bd19bd46d3a260a4dd09287c5e510192867d4a7a137880d62950b729316f3fdf06dadc50deb068a8c419cfbdc4b97c01ad542f5d6a2c66aff804fbc55c6c3a488740fe5dca377701eed3210db7801372e7a0f8cc4e5a90a0ae64d4c25361bfa037efcd0214aa78b0057c257d2b04a95b0e558c6250a18c93f2a245ef7cd86f21438a1a5da12dfd7fde29d9fc02a5235b45dfaa8ca1adcde54eea888fd79b6c34a22b253925c6416d8c363fe253eea73878726dbd8cf2ff1952f8b3e4edb5406c50391c0edb835be3c93d1a1ce6bff78e96623947725bd8a4b82e55afa8ca4dd4a6400176f5cf1afaf0a8ee05ac585296309a27fae8e1c2158cf3a8a54d276f1ec6c14fe2189976b52646fc06da9d2272f0c3aae2101b748e3de28bf9706dbb111bc61710c325f649e58d9b1e7238182103816161dc4b849c487f9d03333014ef5483c1a2cf2e2032098920acccaa3f6051ccc14352ec1df05db660e78ef4f1dc26979356ea668328e395323ca36825f0ddd93e7479f25365644f07538c3e9ccb5a480a6d33f3ddb8192c17d5c89963739c119000a4dfa5688d0bfa1595eda8ce3e45100b24acf86238ea48eea5a2e68303ee68787f6c629901d8185982507fe659a08e92b6c0fde44fa2aea2233b6979293ab03dd8568506a8024f6818bc15de598c550e911b934d7e5b61d3483eaae3733f2b16fcb85e7cd323f100bf8e5a5228752ea53ed3dd07d093eeef67e440338f2179b950d51d6387f0be5d6ccc8060570504ee2c8ffe311d38d9ce9ebda7eee52146d1d8412cd57e4e8b6b25dfc94bb56bbc88b700c10b2c1e1ce0b53479258ac4354bb52fdb7e51b99f31ed778ffc7a0f1294e5b290fbfa8633be38908777597111a7cf6a3cac799bbe64ace3472bcbba291d25e19a187e330ccc0c093f4a1f89a574999aa2d5bd15f1734203e1eab39b6f5b371ce0943baf19b295a95f8f6e37115e66b54ca7c60cad9c4f65431e73d1f17c23f81d67152655445e2cab8e3ce603df334254f08695912b7a935dac044397516bd5d6632f82fe510e3c175abe0318f7bc5e00e23807eb396eb4724c0e987851dd3e25ebb2120545ee67c7d3c59532ba973eed30008378dca5a851906dab2f553cabb9e7a1a20ca41d635a17c3914c774a0434b66072e88299ec924d2ee7983ba0f33c1d7e6c5338c47876fae5dd66a56979164dfed4c36a0725523fe6daa74ee52be401c54ebf7acf10ea7fbf24f123b05940cede857fa42bf4a1a23e7181d5ccc5b4223a14b9319cc5044bac2c1b0668a97ee3981c373ffc21f893cee02b75a3b9cdac5fddc1bd1e816333b775dec148550d3e4b9c97a7a686858627028efcc5e9dd303df9495104755620f7b2466a6e765e81b61c7ae282faf705d6475337d211fb6d1c9d6a5ac4dd06f9bd94433c31103e636f2997943eb60a56a0cf0f3da4b5c139cd80f590db5538753b7711f8be3fd727c3cb6b88956e4d21735428e97b95223cd3af269c170e227acb1de908abc2b162e9f00a25613342b4a418a0dd92dd52b211c14630c043cf058d5afe95f3ff6f0f406f6c13c61eca9f701382a5784781e6e1edc42a4e4859e2606093f724038e6cf283ac2c474f714184c4121eb3ae8b5e06b7541e61d3e387c484425a17f99b3271c57fdf106610bab669b5d20629b5aa01b4fdec7475468258032ce1a47e381f65ff0fae35ad7edd42ca0ac374d85007c47e5ad0372dfedff739a95e66029656cbfb5ef6344ca022db21cf6b4c098fddb5c2e986ebc245178e7cbcecd275e7b8820e11ac5da5c8ba942cf07b5811a47a1389db2d3d9e46798eb22d76f2f15d88457b1d45f61f73ab472cf334f1dba6ed4e190fc9b441fc8a0777335b2ccf86a9d264daa02f74ba26be636f54de8126e1e4e8411862798e00b7bd105c3c93c08ab9fcfab5e43290de9e06acdbd319ea212246b45b7a8df18f34a2ce1ae46578826a5ac969d39fd9c68e90b5d0a3ddea2f0eff28c990a16734d2d13b5c23e764ebd1ee3aed0bf421116e5cc0e34d5317199ec5fe43578761f5971d0e1f4c1d77b37fc41e0512c7b52d5dff52110c897ffd6d257adebf1f2d3d0234edba1db5a62e8c442286c5d9d03c50790e76231b24d06b852dfbbb38974d4ff6273815cbed27faed02e5a8e45513f8baf15fa59f21479644cb302ec0d97f3073ee38d06550ef16aa3182b3c3256d7c1caef35fd0219a818fcc21ba4d406b5d8d9762ab4f5d5d0ac8fc92c4ac46d3d15aae066d273da3473cbe9f7d366e78bb029fa0651ce5950a7c7c80cf6ccf2ecfc7fab412fdcc8e0baf8dd60b1da8cb55afff6a1aab40aeec8ece4ac9c7ae65e35c8c49b006a24b3190f7e077f51aa4e3779860925540d420182489fdd2560b4c72afcd3a759976ad171ffa30dbf9ae6c6cf1b4e2bd6357890bd8c4622226d1081ac28767ce0459a143ef6d4d6ba9168df1f776149bf572811951c12e3061b2011453a068a913ade6e1628459a86094c193d32570bf4d9696ea643e61cbf24db604c92e62ca76eedcf7da765bee66ae17249b96dddebe8646a6f301ddac9e1c493b366211216c146e717b68b0b2a21ca6257a15f5f626ed96e085006d5b6f1b8d2df9e46b3a2d121ff34fe75409c3d54f8d46817b55e0c0b158e91c4546f102a5ac7df7b20996f81fe6a9ba1f15e55de0fd3deda56f85110a28f584f67fc8f0f849e4f045c1988ec7fc57838bc552b6dd17b8b81936b074b00c312655311bd80752cc76e1b83624bc623187038bd20ec85dcfeb60fb005372a8cd042dc0b998b41948c5cdcddf859d3d66525254b15a74d734a6eddf506eb46aacc20d263137a743c19b54ffcb0371a9e3e163956434843c717687cc94e49c21ce6e787abacef18176217987d8ec5b952ebbc5c2c18a6bc523164bd97ef5b3fbfcec3e111cc4ae6936a8205ddb2cabc085b2200be9a05137f55417b850f95890f7404280eef395b59c9e301ac79172c3db403904a8be12b4650faf596127ff22d8f7cbaa1cbc9041edec209c9c77057c8917dc1ec6227593e44e5d02f9aca350695d7d4482617a8ef09dbdc70907a1d64ab0d136ea267d90ab8f40a21fa257c38f1c30d29823108c1d26e057d9f7b16fabae5dc3aad7dba7f23193c64e41a139e300f3d2baa2d5c211e1e82c8a0b03007fd821d68c0f48b38363700e7bcc136c882f1a01ba95b70020e5ad902a82ffab4b24b728ca15af40a353f094d3eb1c9633e0b4b9a1b1a6330aabec214241fcbb1cff497229263be33559dedcde61f7335991ddeb93caa42e4c8ae44f331f39a3684958e728a9b5a6e04b4316d05c46fd82b3e282bdebb4a4d85efd2b6537dabb1551e8a215af8668db0c5d7eb05e7cd6013c0c2c525fc2dce2c7da25473e1fd99934e6325934e02bd8cbcadf23e21df87e66c37a3a105dacf6f56fca17671d1eb9190f1f602987f4a4e593e4b4a0e726d7b70b40517754777417ca6db53f95a6abe426f3a8e8b1570d997bc1178a509a8bf0f54ec64f83589fa43b29bf6d274af40215d9309a9f13afb7516e3e9434f8847557e9c684592ca4c925089d43c86bf014f46cb797ad70b93a1b5d05db8e30d2a156d301d2677cb7850c27b9904d4d1d366c86c7690e761e6aa7ec75b5eac9bf49bf030ade3f83a80327be627c9f5e86ace58f4608a1d9d43a6a35bee78ae5667670891fcfec7641354b0e1a410629dee54946b64128261b602b92100158a9298dcba2710731fc8a5494366a0bf3ab92c7ffcdb6be24e6f22ea1581bfb391bc6d74602f6079d17d3f829a60bcfa3a2aa9e72ad1a8c4752010eadc0c36ff8155ffb9afe12f6df2493d4ff5b762763c26710bcb4ff642cba8624702c95b5616e9d778f43b0382a9f442e3617381d07d9b1670fbb703ce267a7fca734d662bd90a87147983baa298fb06c7f5b75df6a7ea955ab4210441405bce46b44abf407588820e68d90c823ca979a92f554b64a3adf2f6400aadc795aad4a4c5a685aca304e110926289d2b2057079731f878b669a1e1204b125291c3e71912a38a75e9278da0ada025fe08c2be82ca95b7bd93d50a1e9e3b9ecf1090ca32c91ef936d7390a929feaf75c7533d208816dd40cbd74a872fff5c9aceb675669317297623f4c3d6fb293985aec7171d77dd578549fa2651ebf6eacacae7e63170ff90252cc"}]}, 0x2070}, 0x1, 0x0, 0x0, 0x24040080}, 0x12) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x37, 0x2, @tid=r2}, &(0x7f0000000240)) 12:18:08 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x1, 0x0, 0xabe, 0x4, 0x75974142aa95d79f}, 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2010.773320] cgroup: fork rejected by pids controller in /syz6 12:18:21 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xe) fork() 12:18:21 executing program 2: r0 = syz_io_uring_setup(0x68d3, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000010c0)={0x0, @sco={0x1f, @none}, @nl=@kern={0x10, 0x0, 0x0, 0x8}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, 0x100}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r4, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES64]) io_uring_setup(0x19e2, &(0x7f0000001140)={0x0, 0x77ca, 0x20, 0x3, 0x2d1}) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0x800000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fork() 12:18:21 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) fcntl$dupfd(r3, 0x0, r0) r4 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:18:21 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) syz_io_uring_setup(0x252d, &(0x7f0000000500)={0x0, 0x32a8, 0x8, 0x3, 0x150}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r2, r1, &(0x7f0000000640), 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:21 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000380)=@unlock_all, 0xb) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:21 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:21 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f00000007c0)=""/224, 0xe0}, {&(0x7f00000008c0)=""/177, 0xb1}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000b5d22618d20a0d2e22cbbaf5978a17dbbdc7c472", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24004600000068dd000000000001000000", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x128}, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:21 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x100000b, 0x10, r1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x10000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5423, 0xffffffffffffffe0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r5, r6, r2], 0x3, 0x0, 0x1}, 0xdd02) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a00010000000000000000120000000200"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5423, 0xffffffffffffffe0) syncfs(r7) fork() 12:18:21 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:21 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x7, 0x0, 0x400007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f00000010c0)="1b7b172082267faec491b79fc077c207314445a9afb1bc99ddc53e74ef719cdfa3508b572f19ae78ad5b3d8980becc484484b74a7e2a140046430540fdee7ee36c3425b69e9d17abc84c0211a100f9671b2c6d57a285f3cc", 0x58, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16=r1, @ANYRES64]) r3 = getpgrp(0x0) ptrace(0x10, r3) kcmp(0x0, r3, 0x1, 0xffffffffffffffff, r2) fcntl$setown(0xffffffffffffffff, 0x8, r3) waitid(0x0, r3, 0x0, 0x8, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r5, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r5, @ANYRES16=r6, @ANYRES64]) r8 = getpgrp(0x0) ptrace(0x10, r8) kcmp(0x0, r8, 0x1, r4, r7) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7f, 0x2, 0x81, 0x3d, 0x0, 0x8a2, 0x200, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xdb, 0x2, @perf_config_ext={0x10000}, 0x21, 0x400c, 0x800, 0x7, 0x100, 0x80000001, 0x4, 0x0, 0x6eb, 0x0, 0x55}, r3, 0xe, r4, 0x3) 12:18:21 executing program 4: r0 = syz_io_uring_setup(0x3f73, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xafu9\x9eT\xdc.fjW\x8d\xf9\xbf\xd3\xf1\x8e\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0xc, 0x0, 0x0) r2 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x5022bc6269cd7394, @fd_index=0x3, 0x4, 0x0, 0x0, 0x3, 0x1, {0x1, r7}}, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010000000000000000000002256f0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c00080008000800000000003d0c873cfb547ef83909b8fb60b2ceabc3b2685533484d2ee894ef3b92a2f186f7883257eb63b00000000000000000000064cdd6b000ffb090fc59649500194088dc2e9cf4c0f022"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:21 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:22 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0xc, 0x0, 0x0) r4 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r3}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = signalfd(r2, &(0x7f0000000240), 0x8) io_uring_enter(r9, 0x615a, 0xeaf7, 0x1, &(0x7f0000000380)={[0xcaa9]}, 0x8) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6000, @fd=r2, 0x9, 0x4000000000000000, 0x0, 0x4, 0x1, {0x1}}, 0x0) fork() [ 2024.721400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, r0) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:18:37 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c00080008000800000000000000eaea3894416c88910fb4d731e7d617c27d492e22b715e58a06297fad04b1c7af5d67eab4469e6731b4ddf871789b7d03b2c4ee8fecde5982d328154310ed2a6e64d5"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x110, r1, 0x0) syz_io_uring_setup(0x6ec9, &(0x7f0000001cc0)={0x0, 0xd380, 0xd0ebe9f6dbf98fe7, 0x2, 0x20e}, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000001d40), &(0x7f0000001e00)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000002500)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f00000024c0)={&(0x7f0000001e40)=@l2, 0x80, &(0x7f0000002340)=[{&(0x7f0000001ec0)=""/255, 0xff}, {&(0x7f0000001fc0)=""/139, 0x8b}, {&(0x7f0000002080)=""/38, 0x26}, {&(0x7f00000020c0)=""/232, 0xe8}, {&(0x7f00000021c0)=""/40, 0x28}, {&(0x7f0000002200)=""/39, 0x27}, {&(0x7f0000002240)=""/209, 0xd1}], 0x7, &(0x7f00000023c0)=""/234, 0xea}, 0x0, 0x2, 0x1, {0x1}}, 0x827) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xc3}}, './file0\x00'}) r6 = fcntl$getown(r2, 0x9) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x8000, 0x100000) perf_event_open(&(0x7f0000001980)={0x2, 0x80, 0x4, 0xf8, 0x7, 0x0, 0x0, 0x3ff, 0x40, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffa718fe42, 0x2}, 0x10, 0x3, 0x4, 0x8, 0x3, 0x4, 0xffff, 0x0, 0x3}, r6, 0x3, r7, 0x9) write$vga_arbiter(r5, &(0x7f0000000500)=@other={'trylock', ' ', 'io+mem'}, 0xf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) recvmsg(r8, &(0x7f0000001c80)={&(0x7f0000001a40)=@hci, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/102, 0x66}, {&(0x7f0000001b40)=""/71, 0x47}], 0x2, &(0x7f0000001c00)=""/85, 0x55}, 0x10102) fork() sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1224, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfe, {0x4}, [@nested={0x11ee, 0x79, 0x0, 0x1, [@typed={0x4, 0x24}, @generic="60489af60d997ea861ca1d34b7c3e5b1b3a1cb807a774c2ba0fe3f01d269e42a7efd17e3ecda5bc75a3909a06f6c0a37dc09b4e2b8a704749e18e42597d72dec0e38116c4f5268dc294cafa3d3e6a01921f88f8813336d0ea083edcb96238a634aaea653d534b0e3c6712ef4502870e1f06a2ded028a105f5a518cb5ce6d9613fc26c716d10e68a3945e619d1a81cc09b92b6eee6b91fbbb", @generic="113c4ad04c4b7f0e0469093d0fe57afea05015816115e2ac39d0c41bb95cb4bb27f5c18845bed40842adc720fd2fc19b7efc62acd3c1ffe75a13aa403ca1a7d64446b315dbc7e78b7aa4c8071c3eb7f96c750b3ac1454bcfb7d753cfba53f23bb33ecfd6e9cd1a00e28d4e9aec7322bd3e690dc2c17453a6eec409437036d73647d8361a4772848bafc5df6210a6c9f51f837ae1d0e0da293df9bed7e9", @typed={0x8, 0x1f, 0x0, 0x0, @uid}, @generic="013625b5e4dd492b6d5ea2951ab673c2f16faa65d963cd4bb720a88db168904f93f87b961dc7f5370e221193b45a1acbeb5a00d4acc8a91341f9f5b243da6b9828f1888a40218016f5317f8cf5631a303cb39dffa6707812724fb578083c609d80a20676fa4d87b4eed7e4a48145b324bbfdb0fbc93d4c36aa99b92d95eccbc0f7f643b545a6258525e259d873c696b77b95f5823f0e07f823ab865463658e2d68b797091d117c3f9e", @generic="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"]}, @generic="75f5bfbc4d6b724c5fd05c62367fa04bcd2d00ae6e4f011ce94b9861bc"]}, 0x1224}}, 0x4028050) 12:18:37 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:37 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1b24, &(0x7f0000000500)={0x0, 0x7be1, 0x2, 0x3, 0x24d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000600)) fork() 12:18:37 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r0, 0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x0, 0x53}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r2, 0x3497, 0xa6c7, 0x3, &(0x7f0000000380)={[0x1]}, 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f, 0x40010, r3, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="98c17343222f2d86ea317c0fcbc8b8adaac91fdbff3ccbdc8ee70e71b6890114bb7cea7b7d4fc33ab1241a806fa2a481d6e693c45aacea6d900abfe26fa3d21a0021abcd925901fb2f2ab3abcb8e0c9405e92d2c76666c876e119fb227d64d0a2664ef5d103617bd149560fbf2f673611de0abd7", 0x74, 0x1}, 0x9459) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:37 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r1}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x11, 0xffffffffffffffff, 0x10000000) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') r6 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@generic, &(0x7f00000000c0)=0x80, 0x800) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r6, 0x5ad9, 0x0, 0x63d0, 0x4}, 0xfffffffe) 12:18:37 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6420, 0x0, 0x9, 0x1, 0x9f8b, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fork() ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000240)) 12:18:37 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) write$vga_arbiter(r2, &(0x7f0000000380), 0xf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() sendto$packet(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000001280)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xe0, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x5}, 0x40) [ 2040.619983] loop7: detected capacity change from 0 to 2103296 12:18:50 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xff}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:50 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000240), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/33, 0x21}], 0x4, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x100) io_uring_enter(r2, 0x4ef6, 0x5af5, 0x1, &(0x7f0000000400)={[0x8]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) syz_io_uring_setup(0x1f29, &(0x7f0000000500)={0x0, 0xe98a, 0x10, 0x0, 0x332}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000001800), &(0x7f0000001840)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:50 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {0x0, 0x0, 0x4}, {0x0, 0x10000}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x4000005) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r3, 0xd8499488957a772f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 12:18:50 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) mbind(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000080)=0x80, 0x3ff8000000000, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:18:50 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:50 executing program 0: prctl$PR_SET_FP_MODE(0x2d, 0x3) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) prctl$PR_SET_FP_MODE(0x2d, 0x2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) accept$packet(r3, 0x0, &(0x7f0000000040)) open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80) r4 = fsmount(r0, 0x0, 0x74) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000004c0)={0x6, 0x9b, "0f72d497f1f6b536f9be9a309d60dd2efa05ff02a7fb7cbebc8e7d38440ce86c35cd476da1d09b277ed7ba93249a8a8432e8b9f68e185f0745f4a57b315a026c250f5cd243aab65962cc8bc6311e44cee65a70c4421329d8d0aff11534a8986801a8317b51743ddb8ee5c86c8bd32434473725322bf1f41d7e92f5f6a8ef458f345187b3027c4d9c673a4a86c105db8c6cd9d7ff7ceaca84858720"}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x7, 0x4) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 12:18:50 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x4, 0x4, 0xffffffff00000001, 0x10800, 0x1, 0x1000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5423, 0xffffffffffffffe0) sendfile(r0, r1, &(0x7f00000010c0)=0xffff, 0x8) fork() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)={0x80000008}) 12:18:50 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x200000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2053.679054] loop7: detected capacity change from 0 to 33559040 12:18:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r3}}, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r3}}, 0x6) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:51 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000001a40)=""/98, 0x7}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) io_uring_enter(r0, 0x6b10, 0x8dad, 0x1, &(0x7f0000000540), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000f, 0x10010, r0, 0x8000000) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000001ac0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001600)={0x0, 0x6, 0x1, [0x6, 0x7, 0x9, 0x9, 0x383], [0x4, 0x1000, 0x34, 0x401, 0x4, 0x8, 0x40, 0x8, 0x4, 0x6, 0x81, 0x1f2, 0x1, 0xb4, 0xffffffff, 0x89a, 0x9, 0x4, 0x1, 0x7ff, 0x0, 0x2, 0x1, 0x10001, 0x9, 0x5, 0xa3000000000, 0x1, 0x2, 0xffffffffffffffe0, 0x0, 0xfffffffffffffffd, 0x0, 0x8ad, 0x8000, 0x2aa1bdce, 0x2, 0xfffffffffffffffa, 0x200, 0x1, 0x7, 0x6, 0x80000001, 0x2, 0xcc, 0x8000, 0x3, 0x5, 0x7, 0x401, 0x5, 0x7fff, 0x3, 0x4, 0x6, 0x6, 0x7fffffff, 0x9, 0x9, 0x8, 0x401, 0x3, 0x8001, 0x2, 0x5, 0x3, 0x5, 0x3, 0x5, 0x1ff, 0x8, 0x7, 0x90, 0x31, 0x7, 0x6, 0x20, 0x8001, 0x1, 0x5, 0x7fff, 0x4, 0x3, 0x8, 0x8, 0x18eb, 0x3, 0x0, 0x100000000, 0x1, 0x10001, 0x8, 0xffffffffffffff1d, 0x996, 0x1000, 0x8, 0x6, 0x6, 0x7, 0x9, 0x4, 0x3f, 0x20, 0x5, 0x2, 0x8, 0x7432, 0x7, 0x3, 0x1c000000000, 0x7, 0x101, 0x5, 0x100, 0x4, 0x8, 0x6, 0x2, 0x8, 0x3]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001e00)={0x2, 0x2, {0x6, @struct={0x9, 0xe11}, r4, 0x1, 0x7ff, 0x8, 0x2, 0x7, 0x1a8f796cbf53095e, @usage=0x40, 0x7, 0x4, [0x0, 0x30, 0x7, 0x3, 0x7, 0x6b0c]}, {0x2d94a953, @usage=0x100, 0x0, 0x2, 0x36e789ce, 0x7, 0x1200, 0xd5, 0x89, @usage=0x6, 0x0, 0x9, [0x5, 0x40, 0xbc, 0x1000, 0x2, 0x6]}, {0x6, @usage=0x7fffffff, 0x0, 0x7, 0x8, 0x7ff, 0xa0, 0x0, 0x45, @usage=0x80000001, 0x0, 0x6, [0x8000, 0x2, 0x2, 0x1, 0x7fff, 0x1f]}, {0x1000, 0x0, 0xafb}}) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x2007, @fd_index=0x8, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000240)="3d02921450f1f5dd1410b27baa23491578139bd9d2584014a0b462507d5690797ce63b6e4ef426e36004d0a1ff750c2610c590af83b13793ea367980fc1c665a0014f6cc8bf38329a0ee675de7cddc2bcb0fce60bd0ad4d72e2c247b6c452b0b51af03d1", 0x64}, {&(0x7f0000000380)="7e5d0a3adfe4480834be8d5991aca2da1fd401dd67393b760221f8a1911acff0e914e0a16097c131627d9a66cd4621f0d13aa0726e2f7897ba785bd6afcb565b61b9ee8d3460aa595f6d513cd0e455332c0cb0030f99a079728252cbfcd94f812998703c7d6c54f9b1369dd5936105808174fa8a025d566c7c230c238081eea9d0624cdf5c10262f70bd906db2990ed73a0d2ea9e8b7a63b2f65b3f143cd3516e6225f", 0xa3}, {&(0x7f0000000440)="0ba08c587a726d15bf0bf0d233ef7b6f49e4d94f086be50830e4ba1f0076397dd12640b08174038bc2bfbe215fb4d61bf5ec65ea8d80a58ea2fb9eb1c47968dcb4a6dea8d15b9629b0ff5368cdef16a3abb7f05abd8034f5345c254608583030a0c6e23fbc9816fd84c98392f89da28bcc5e7d23", 0x74}, {&(0x7f00000000c0)}, {&(0x7f0000000600)="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", 0x1000}], 0x5, 0x2, 0x0, {0x3}}, 0xa8d) [ 2053.837854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:18:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:51 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd_index=0x4, 0x2, 0x3, 0x80000000, 0x2b, 0x0, {0x3}}, 0xe) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) r4 = signalfd4(r0, &(0x7f0000000640)={[0x7]}, 0x8, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0x0, {0x0, r4}, 0x5, 0x1, 0x1, {0x0, r5, r6}}, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a0001000000000000000000000000f4ffffff000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, r0, 0x0) socketpair(0x22, 0x2, 0x8000, &(0x7f0000000540)={0xffffffffffffffff}) connect$inet6(r7, &(0x7f0000000600)={0xa, 0x4e22, 0xc6, @mcast2, 0x4}, 0x1c) 12:18:51 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac1410000500"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4, 0xc108, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000380), 0xa}, 0x420, 0x1ff, 0x6, 0x2, 0x4, 0x0, 0xef9, 0x0, 0x7, 0x0, 0x7fff}, 0xffffffffffffffff, 0xc, r1, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, {@in6=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64]) r2 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:18:51 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000280)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x800}}, './file0\x00'}) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:18:51 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2266, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x0, 0x1ffffffffffffffd}, 0x11010, 0x84b, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() fallocate(0xffffffffffffffff, 0x24, 0x80, 0x5) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) getpid() rt_tgsigqueueinfo(0x0, r2, 0x35, &(0x7f0000000080)={0x41, 0x830a6, 0x1}) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x0, &(0x7f0000000c00)={r3, r4+60000000}) ptrace$setsig(0x4203, 0x0, 0x3, &(0x7f0000000100)={0x25, 0x40, 0xfff}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c40), 0x244400, 0x0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 2054.169245] loop2: detected capacity change from 0 to 2103296 12:18:51 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) io_uring_enter(r0, 0x3a55, 0xd627, 0x3, &(0x7f00000000c0)={[0x7fff]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, @perf_config_ext={0x4, 0x6}, 0x18100, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0xe1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) [ 2054.438955] loop3: detected capacity change from 0 to 2103296 12:19:08 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0xa415, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:08 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r4 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0xc, 0x0, 0x0) r5 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r4}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f0000000540)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000600)=@ethernet={0x307, @link_local}}, 0x9) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r2, r3], 0x2, 0x0, 0x1, {0x0, r10}}, 0x5e5) 12:19:08 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c581d066c0b607a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:08 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:08 executing program 0: r0 = syz_io_uring_setup(0x10068d4, &(0x7f0000000100)={0x0, 0x8681, 0x0, 0x1, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) write$vga_arbiter(r3, &(0x7f0000000680), 0xf) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x17110}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="b77060ad", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf25260000000400d00004001e010400670004000801040067000400cc00"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) fork() 12:19:08 executing program 3: r0 = syz_io_uring_setup(0x168d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000010c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x1000000000, 0x45e, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) r5 = getpgrp(0x0) ptrace(0x10, r5) kcmp(0x0, r5, 0x1, r1, r4) fcntl$setown(0xffffffffffffffff, 0x8, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r6, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRES64]) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1f, 0x0, 0x8, 0x6, 0x0, 0x8, 0x4b77e5d6e0e3560e, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x3, 0x100000000}, 0x8000, 0x6, 0x1, 0x4, 0x100000001, 0x1e8, 0x7, 0x0, 0x1}, r5, 0xb, r7, 0xa) ftruncate(r4, 0x0) 12:19:08 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:08 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x6) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) [ 2070.797133] loop0: detected capacity change from 0 to 2103296 12:19:08 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x11010, 0x2084b}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:08 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x508e, &(0x7f00000003c0)={0x0, 0xb19f, 0x20, 0x1, 0x3c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000840)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd_index=0x8, 0x6, &(0x7f0000000800)=[{&(0x7f0000000600)=""/75, 0x4b}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000780)=""/128, 0x80}], 0x4, 0x11, 0x1, {0x0, r3}}, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300001c, 0x50, r0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000380)=@IORING_OP_NOP={0x0, 0x3}, 0x6) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:08 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:08 executing program 3: ptrace$cont(0x20, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x68d2, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) clone3(&(0x7f0000000600)={0x134080, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000380), {0x24}, &(0x7f00000003c0)=""/209, 0xd1, &(0x7f00000004c0)=""/107, &(0x7f0000000540)=[r2], 0x1}, 0x58) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x1a4, 0x36, 0x100, 0x70bd2d, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x7f, 0x0, 0x0, @pid=r2}, @nested={0xffffffffffffffc6, 0x6f, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @fd=r0}, @generic="a53a1dd02b7819791e1d73c9f6f7383d9710468aec8ac27fd73286ea49295c8916dde790ebd46137f568859bb0474ea95d82680ef98c9c6a205a8cc3994720c3ee9f8ae9ef0bbf1ba7791d74628e1c141fa0b3a1e4786ed3559861cda9a355fb6ffb81c0", @generic="371592ee9bfa72a2a6796c75af6565b241cf4efcf351057102202fcdb457229c33c8cb7f52d240912dde145418324cf649e15f2c36a2fa14b91e20a1fffeefc0cf113280070d95b3c92c1d22d587a4c3c19c27de75eacf54ed812fe13e4a06f579400273280762d67e051b2ce4a828a75ad7d76dfdebc32c", @typed={0x8, 0x1c, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x5b, 0x0, 0x0, @u32=0xcd9}, @generic="189cc5f24b20fa9f3ae9b6a294138e24f9feb6c32e13a5bf6ab239b3bb8e5473f2de5b0089d989f3cef0b977558f427d17e194b8d61275dab176c7e61b2719e8542ccc58a45d02e60f75667d82f94365c1ec2d228be1eea4d44e5e4f9e176e44676ffa48879e72aadf754f63b7eb237c98ba4a050711aec5156cb31bddfd4092ca79c78578cc13ef2c47ed300ceeadc9c6b6d704971ba48e185dec76ac3092228c42d9490b7bbd1e", @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x32, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x60, 0x0, 0x0, @uid=r5}, @generic="57ef954f402742e1", @generic="3ab141a46976c485eb6ea0d0ff5ca0306a7e135f5a87b1d31d6980a09b7dbdc408bc1a38ff5572156a8688573c0b66b486cbfe63c9da0f56690631c0e232a665e8dccc6dd16390e123dde5142338e9c71a62cb19ed"]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 12:19:08 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000023000000000000000800000000000000ffffac141400e0000200"/63, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:08 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x418000) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:08 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f00000011c0)=""/82, 0x52}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fork() r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r5 = openat$cgroup_ro(r1, &(0x7f0000001180)='pids.events\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001500210e000000000023000002000000"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001540)=ANY=[@ANYBLOB="01180000001e6ddc04034ad6cee15b1300000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$nl_generic(r7, &(0x7f00000012c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"/4322, @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x10e8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_generic(r8, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf0, 0x3b, 0x200, 0x70bd29, 0x25dfdbfd, {0x6}, [@generic="1cbc90bac4575fd3f422cdcd5bdcfa786e6d11ac64de9d2b82f26baf4d8414a6c59b3f27ab89b5703174d9567b6ff3cdae996028e79ce6715da4d7fe32e63728d7c571723730ebef642668ade18fd05a811baec0b015583320e289542bdd434e306a007d14635a928f3323a69428b143e04931956263e85470914e9a4c4dbdda45eb789ea1b2c7fdceea5cfb7538ec973888e853210a5c4742aa70e32c3f8239ac84254f27897a3aac9931de7b1d641507bf01720e0e33889a3dd6b4729f07b27c7a03805852d9a6cde2e7dd6ad32646d7f37e7020", @typed={0x4, 0x4c}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x44084) pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = perf_event_open(&(0x7f00000010c0)={0x0, 0x80, 0x83, 0x89, 0x40, 0x4, 0x0, 0x1, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x2, 0x400}, 0x18, 0xffffffff80000001, 0x10000, 0x4, 0x4, 0x20, 0x819, 0x0, 0xfffffff9, 0x0, 0xe418}, r3, 0xb, r9, 0x2) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r11, @ANYRES64=r10]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) 12:19:08 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000001e00)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x61, 0x6, 0x2, 0x80000001, 0x3, 0x3e, 0x2, 0x3c6, 0x40, 0x1a2, 0x8, 0xfff, 0x38, 0x1, 0xee4, 0x9, 0x8}, [{0x4, 0x101, 0x100, 0x13207254, 0x1f, 0x5, 0x7, 0x5}, {0x5, 0x7, 0x81, 0x402fe991, 0xe6, 0x8, 0x5, 0x1ca2}], "9efd377cc2c5e4a2a869e8e21c4ef5aa7b828fdc3c160a3fa7df5fb67fe19f9720a37446c76e36753f1b5ae8b40a0cbed5912349ba2fcbfa1d463dcd412e0313cb4e7a384a820b2a67546ab4e8e18905ee96268cd98794f7ebdd7b93e3b8afe92a0dedd6f386bad4f8072553317c0a786561a186b45fb6e0e42a580b5d9062a57fa14b55d0f31b5b45be43533c8521ed08f817186d8d279b33ba73e618b7432d1c831a2b22ec7afb6eb411d2e1115bd4afd4035a8d6774488af295803a547c2be153c6c283ad54e96bfa4b3765bdef271f7efd3350c7bc86e2e6c930ebc53be88eff1bd675672f4df18988", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb9b) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000001a40)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000001980)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/137, 0x89}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000016c0)=""/244, 0xf4}, {&(0x7f00000017c0)=""/149, 0x95}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000001880)=""/236, 0xec}], 0x8, 0x443ca349, 0x4) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:21 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:21 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendto$packet(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000540)=0xe8) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r4, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x7, 0x0, 0x18, @mcast2, @mcast2, 0x8000, 0x7, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e0010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdbdf251300000004000180280001801400020069703667726574617030000000000000080003000300000008000300010000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f746f5f6261746164760014000200766972745f776966693000000000000014000200677265746170300000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="440001801400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030001000000140002006e72300000000000000000000000000030000180140002006d6163766c616e300000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300000000005800018008000100", @ANYRES32=r3, @ANYBLOB="14006400766c616e30000000000000000000000008000300010000001400020076e57402000000000000000000616e30000000000000000008000100"/72, @ANYRES32=r6, @ANYBLOB="4400018008000100", @ANYRES32=r7, @ANYBLOB="140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200626f6e645f736c6176655f3000000000180001801400020076657468315f766c616e000000000000"], 0x1e0}}, 0x40000) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:21 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x5, 0x4, {0x0, r0}, 0x8, 0x3, 0x1, {0x0, 0x0, r0}}, 0x7f) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x26, 0x200, 0x70bd2a, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x54, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4008044) 12:19:21 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x10000000000001d2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) fork() 12:19:21 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x160, 0x1d, 0x400, 0x70bd28, 0x25dfdbfc, {0xf}, [@nested={0x14c, 0x5c, 0x0, 0x1, [@typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="6ee562b9dc860504b909c2ce9829bad4b65fcd08cba043f055e5ddbfd4c1737dc573b831be793992a08812694093506c605bc792688b48978f", @typed={0x14, 0x74, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xc, 0x91, 0x0, 0x0, @u64=0x3}, @generic="40c74066e6e2d01b0d6cdfd40b4ed5f19f1dc749f8ada866053a537d18f1dae6473e48be289f9a200e25c1bf250ee8c493388b0ff401b91a07144e4a306b440f05477bab971dc386625b008e28c66cae6e11f66c246f9c6e718faeab59770658ca6bb9cf46a99bbd86758616ae73086b4b7f350cb3013d4a7a35a709af0d2b87697eac733a2343019de3b510124bd9a5fb3cf1d676161f742c37c20f058e0045a6780e1fa821cc5840b103a273579c054df0142afdb8bf86fcabce793e689981c35af5b6e23340de49ae4b664bb52c2f864dbbb7aa811cca3f5308"]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x4000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) preadv2(r2, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/191, 0xbf}], 0x6, 0x1, 0x8, 0x1) fork() 12:19:21 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r0, r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x7, 0x8, 0x5, 0x0, 0xc46, 0xd424, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0xa800, 0x5, 0x6, 0x3, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r3, 0xa) r4 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867c, 0x0, 0xffffc, 0x59}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r4, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000001140)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r5, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r5, @ANYRES16=r6, @ANYRES64]) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r7) fork() 12:19:21 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:21 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x2, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x2, 0xa, 0x0, 0x8}, [@tfcpad={0x8, 0x16, 0x7c}]}, 0xf8}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2084.040679] loop7: detected capacity change from 0 to 2103296 12:19:21 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5423, 0xffffffffffffffe0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:21 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:21 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x3, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:21 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x105900) r2 = fcntl$dupfd(r0, 0x0, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000440)=""/176, 0xb5}, {&(0x7f0000000300)=""/67, 0xfef3}, {&(0x7f0000000240)=""/185}], 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:21 executing program 3: r0 = syz_io_uring_setup(0x74ba, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5423, 0xffffffffffffffe0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x93, 0xd5, 0x5, 0xffff, 0x22a5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x400400, 0x106) ftruncate(r2, 0x1) fork() 12:19:22 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_enter(0xffffffffffffffff, 0x5fa8, 0xdb67, 0x1, &(0x7f0000000380)={[0x1000]}, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/vmstat\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16=r2, @ANYRES64]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00'/10, @ANYRES32=r3, @ANYBLOB="02000000000000002e2f66696c653000"]) write$vga_arbiter(r1, &(0x7f0000000900)=@unlock_all, 0xb) r4 = syz_open_dev$vcsu(&(0x7f0000000500), 0x302, 0xa0002) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/81, 0x51, 0x1, &(0x7f0000000680)=""/241, 0xf1}, &(0x7f0000000780)=0x40) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() write$binfmt_script(0xffffffffffffffff, &(0x7f00000007c0)={'#! ', './file0', [{0x20, '^(\xd1^-*'}, {0x20, '\xff\xff'}, {0x20, ',%'}, {0x20, '/:,\\.@\xb7+^.],)&/@\\:{$$#!+]'}, {0x20, '\xff\xff'}, {0x20, '/dev/vcsu#\x00'}, {}, {0x20, '\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92'}], 0xa, "ddede76827a2acd03b193b26501a518d32c4a5a217018fa9faf8977ec41cd6292a0e8c9ea06c5ac1942aaa71a959250f58a0e9554a5253ada18713f438d26cb027e9be89cd35"}, 0xe4) 12:19:22 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x1b, 0x1f, @buffer={0x0, 0xb, &(0x7f00000000c0)=""/11}, &(0x7f0000000240)="5a028ef430e9385234c27595ed70710eb0238a6154b2bd4b6ab364", &(0x7f0000000280)=""/85, 0xbdd, 0x22, 0x1, &(0x7f0000000380)}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000680)={{0x2, 0x2, 0x8001, 0xb78c550ba9382ed5, 0x3}, 0x5, 0x5e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5423, 0xffffffffffffffe0) fcntl$setflags(r4, 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c81, &(0x7f0000000500)={0x0, 0xa70c, 0x20, 0x0, 0x153}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) fork() [ 2084.753530] loop1: detected capacity change from 0 to 2103296 12:19:22 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, r0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) pkey_mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, r0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:22 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() [ 2084.791233] loop2: detected capacity change from 0 to 2103296 12:19:22 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000400000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000505031c4efea3e147f0004000000000000000000000000000000000000000000000000bd553b404fbcf6bd0000000000000c0008"], 0xfc}}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x9, 0x810, r0, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000540)=[{&(0x7f0000000400)="f29124ae0bb029357e", 0x9}, {&(0x7f0000000500)="4463dfd0260a94ecae10d6cad63f972c8cbbe2652ce145118280c839dbbf114aa8", 0x21, 0x5}], 0x0, &(0x7f0000000600)={[{@block={'block', 0x3d, 0xa00}}, {@mode={'mode', 0x3d, 0x9}}, {@gid={'gid', 0x3d, 0xee01}}], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x34, 0x63, 0x4, 0x34, 0x66, 0x36], 0x2d, [0x4f, 0x39, 0x31, 0x66], 0x2d, [0x37, 0x36, 0x64, 0x32], 0x2d, [0x64, 0x62, 0x32, 0x31], 0x2d, [0x37, 0x65, 0x35, 0x65, 0x36, 0x62, 0x63, 0x34]}}}, {@fowner_lt={'fowner<', 0xee01}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x12}}]}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000007c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0x1000) syz_io_uring_submit(r2, r1, &(0x7f0000000740)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x8}, 0x1, {0x0, r4}}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x4}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2084.952636] loop7: detected capacity change from 0 to 1536 12:19:36 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000017020007002e2f7c696c6530"], 0x10) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:36 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc0000001a00010027bd700000000000000000000000e8bb278c8a19c40100000000ffffac141400e000000200000000000000000000000000000000000000005fa86a657e7fd7b2787bc4ec18ad87b9b494ea1be330962d1be2d4de82e8e23436d33e0235d8c7ac54701cbc92ea73f915ed6a33f324", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000c989be6d000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffe0) r4 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103700) getpeername$netlink(r1, &(0x7f0000000500), &(0x7f0000000540)=0xc) syz_io_uring_setup(0x7a71, &(0x7f00000002c0)={0x0, 0x6d14, 0x20, 0x3, 0x17}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) dup2(r3, r4) 12:19:36 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000240)={0x3, 0x9f, "4284811437d286f2b00c861688eb25bc93cca0735235c704618fee7d20b0dad1454cdfa18c432c6b7e6da9cefd6fcda2e0d70d4f2f2ac46c0168f0af3c0fb10e38b0bc3290b6ebe79e4875d05b9a1f4bb4cd682e7891f9b86c9e3980d012e70126b2c3139558aac712f363dbc78c6615235372769da47a4fb611a88a1b7f14455dcde603f01ee47f57d06bc4f81d2ac898f53edd511b8d5da76cba5ba61313"}) fork() 12:19:36 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:36 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:36 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001840)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) r4 = syz_io_uring_setup(0x374d, &(0x7f0000000380)={0x0, 0x9c24, 0x1, 0x3, 0x135, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x61}}, './file0\x00'}) io_uring_enter(r5, 0x3bc4, 0xdded, 0x2, &(0x7f0000001700)={[0x8]}, 0x8) creat(&(0x7f00000002c0)='./file0\x00', 0x60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000001800)=0x80000000) bind$packet(r1, &(0x7f0000000240)={0x11, 0x7, r6, 0x1, 0xa7, 0x6, @local}, 0x14) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) fork() setxattr$incfs_id(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780), &(0x7f00000017c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) 12:19:36 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r3 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0xc, 0x0, 0x0) r4 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r3}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r1, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000600)="87a43c96659d28a3b895b40b5afc143a96439f52a1d5d59aeade934cc489ad40a558f93ac5dab6b7cc7db5e55d3d464d9a0b222863b3cb1021dd1e7e84cd3fc7631b88f800a2869e497f76f402d15367e64373c2f752992771293450a75b4c1b0a39da1745bb73a744e61feed89f9840ed645593ff20b2b8b514c00dc7c3fe2a6071220f0a0955d84fead6f585f518cb6979b7458122820d5f3ed6e71726ecf5b8018d99457200b00d1b01dc9b54b8eae74fc3a099fbe09ad84eabac4f846e29ef9a4f78297c18f00ad63bcca0b59cc948a13e650e96b03c2d", 0xd9, 0x1}, 0x3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000002f000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:36 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000180)={0x0, 0x8}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x220021, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x9b7a, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x29, 0x2, {0x2}}, 0xb) pkey_alloc(0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r1}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000941000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2099.214339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:19:36 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:36 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x3000000, r0) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:36 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0xd13f26e404fecbdc) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc00d6d780de9b4e143bbdc51618f000001a003100000000000000000000000000000000000000ffffac141400e00000021b8d668cb5c07c93a9000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x2c14a1211cb46da4}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:36 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd=r8, 0x2, &(0x7f0000000240)="ac52f359c04c16d9109383c976858b229e95e6a18ad2ed8880a43c11142703f2f751f52d40d499f9dd3bbb08f7d184d958775cb5c20cf204a04b5d4bbac8c8171900144e1028c5535b9540ad4635022997168639a91ebb10d413294a58fe6e575130c5b6bbc26d1f8a12e546c467e53aaa1fe48619e04b068964b345cbf1b2ca9337f0b0354dcd4f9670ed7e58405ae938820495a7fc72e76d6b944ac2", 0x9d, 0x1}, 0x3b) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:51 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x6a66, &(0x7f0000000c40)={0x0, 0xea97, 0x4, 0x3, 0x249, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, r1, &(0x7f0000000bc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd=r0, 0xa4, &(0x7f0000000b00)=[{&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000a00)=""/254, 0xfe}], 0x9}, 0x4f7a) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x6621, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000c00)=0x4) fork() 12:19:51 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) io_uring_enter(0xffffffffffffffff, 0x75cc, 0x331b, 0x2, &(0x7f0000000080)={[0xffffffff]}, 0x8) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, 0x0, 0x4, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f00000000c0)=0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) pkey_free(r1) 12:19:51 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x210400, 0x1c3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) syz_io_uring_setup(0x3765, &(0x7f0000000500)={0x0, 0x14ad, 0x10, 0x2, 0xc5, 0x0, r1}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000600)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000680)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r4, 0x0, &(0x7f0000000640)="5eda906727beb7a5bd66ab773e98d5f832c726587ffe38b395bb8518cccaa303a57b5ddd6f1ff01eab4bb947", 0x2c, 0x4000000, 0x1}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:51 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000001700)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x4, 0x0, 0x7, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f00000016c0)='ext4\x00', 0x0, 0x7fffffff, 0x0, &(0x7f0000000040), 0x800, &(0x7f0000001680)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRESOCT=0x0]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x100010, r2, 0x0) fork() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001600)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={&(0x7f0000001100)=@xdp, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001200)=""/227, 0xe3}, {&(0x7f0000001300)=""/85, 0x55}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001440)=""/107, 0x6b}], 0x6, &(0x7f0000001540)=""/78, 0x4e}, 0x0, 0x122, 0x0, {0x3, r4}}, 0x200) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r5, &(0x7f0000002e00)=""/4082, 0xff2, 0x303) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x3}, {0x0, 0x0, 0x8000000000000}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0xd, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r5, @ANYRES16, @ANYRES32=r3]) r7 = getpgrp(0x0) ptrace(0x10, r7) kcmp(0x0, r7, 0x1, r3, r6) openat(r6, &(0x7f00000010c0)='./file0\x00', 0x141000, 0x80) 12:19:51 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a008800000000000000000000000000000000000000ffffac00020000000002000000804100008000000000000000000000000000000000000000008a863ab2ebe049234433ba5743498c5027b3a0d061d5c6f26992971424f59ffce8e4350a1919e1450e46938ff47d2e2f4f6503521662371d546dd2a80e5dd92adebbe911d33bb09759b71f1401fe455caa2c4ce72ee033e3d55449a80d5580481a57b949b1d5f3bf457c6270244c0315f11b1ed6ef8cede9a7a19e9bf22b9a3b52beae2cab49d83317e9c3cf813fc96dfb3ec88e0447d8e5f56543022e1dbadeefc103d4c8ad26b0245c4867", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:51 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000006c0)={r3, 0xfffffffffffffc01, 0x1, [0x3, 0x4b, 0x4, 0x1000, 0xfffffffffffffffd], [0x8001, 0x401, 0xfffffffffffffffc, 0x4, 0x80000001, 0x7fff, 0x0, 0x81, 0x95e7, 0x0, 0x5, 0xef, 0x75b, 0x38b, 0x0, 0x40, 0x7, 0x400, 0x2, 0x1f, 0x400, 0x3, 0x1f, 0x81, 0x20, 0x7, 0x3, 0x3ff, 0x9, 0x8, 0x3f, 0xffffffffffffffe1, 0xffffffffffffffff, 0x0, 0x3, 0x8, 0x80, 0x1, 0x200000, 0xe1e, 0x4, 0x9, 0xff, 0x57, 0x65d0, 0x9, 0x4, 0x71, 0x8, 0x101, 0x1, 0x2, 0x0, 0x1, 0x7f, 0x100000001, 0x311, 0x200, 0x7, 0xfffffffffffffff7, 0x0, 0x5, 0x5, 0x0, 0x100, 0x80000001, 0x81, 0x81, 0x7fffffff, 0x1ff, 0x0, 0x7ee, 0x80, 0x1, 0x9, 0x20, 0x9, 0x5, 0x7fff, 0x80000000, 0xc2, 0x0, 0x6, 0xced5, 0x0, 0x42, 0x110a, 0x2, 0x0, 0x0, 0x2, 0x3e2000, 0x1, 0xc5, 0x101, 0x81, 0x200, 0x7f, 0x9, 0x9, 0x1, 0x2, 0x401, 0xfffffffffffffff9, 0x4, 0x1, 0x7fff, 0x7, 0x3f, 0x785, 0x7, 0x1f06, 0x1, 0x1000, 0x6, 0x9, 0x68, 0xadec, 0x100000000, 0x3, 0x8]}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x7fffffff, 0x2, 0x1, 0x6c300, 0x1, [{0x6, 0xffffffff, 0x3f, '\x00', 0x480}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2113.989862] loop3: detected capacity change from 0 to 135266304 12:19:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x100000b, 0x30, r0, 0x0) fork() 12:19:51 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x94000, 0xe9) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5423, 0xffffffffffffffe0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r6, 0x5423, 0xffffffffffffffe0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5423, 0xffffffffffffffe0) r8 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x1000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x7fff, 0x0, &(0x7f0000000280)=[r5, r2, r6, r7, r1, r8, r2, r1, r2, r0]}, 0xa) fork() 12:19:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x30, r0, 0x0) fork() 12:19:51 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5423, 0xffffffffffffffdd) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r2, 0x40, {0x0, r3}, 0x101, 0x1, 0x0, {0x0, 0x0, r4}}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xc1, 0x81, 0x53, 0x7f, 0x0, 0xfffffffffffffffa, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1, 0xfaa5, 0x5, 0x2, 0x7, 0xfffffffb, 0xea2, 0x0, 0x0, 0x0, 0xffffffff}, r5, 0xe, 0xffffffffffffffff, 0x98aa826bf461f5c5) [ 2114.203383] loop2: detected capacity change from 0 to 2103296 12:19:51 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xa91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001180), 0x1}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000001200)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000000001000000000000000b0000ad8000000018000003cd11ab7d0fadda9592f25b6100c2050000290202000000000000000000", 0x73, 0x400}, {&(0x7f00000013c0)="000080000000000000000000e58ccb9851f7bda65623b0847a0b52832702a1fd7c911d47309d09a00a62a6d02f22922fbcea20f4653d2b4612a3f6452f03591bfd73eb55632000230164b247216c6e31cd26b35ea404fa48f905e5ebff96994e27b8748ea4aefe5763b003806f28edd1c309fee27554dfd0e29a", 0x7a, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000001100)="03000001000000e6d9", 0x9, 0x7fe}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="509336005000fe00", 0x8, 0x10000}], 0x0, &(0x7f00000012c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="384c0098bf9ed6a0c7f79d2e1898ca1ea42d5b18ddc8a66232f996a7ca6b1bbaa222f8336dc53b0a2f510e0dc83c704711b6dfbc61bc6800a679b8a36d136be7690b6da35efff9f410f0be764fb720b329ac99b7b678582a13ab35841d8ef8630aceea276dda44622c8cbf8697cc520b1f0f02ec8144f700fad6145d4ba75d5f56653ebe868ef81954fbb70594cfbd72bca0dac75fc7aeb9397fb667c3d07efa294849c6514f39c40ae8806ed4d23cb8fc171976b171d3dc5bd88d2c0626a4a33f33a5d1af4d94e1f56fcb05b2bdeb", @ANYRES16=r1, @ANYRES64]) syz_io_uring_setup(0x24ba, &(0x7f0000001440)={0x0, 0xb424, 0x4, 0x3, 0x3a6}, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000010c0), &(0x7f0000001080)) r2 = pkey_alloc(0x0, 0x2) r3 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) r4 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r3) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:19:51 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) memfd_create(&(0x7f0000000240)='\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) openat2(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x400, 0x4, 0x17}, 0x18) openat(r3, &(0x7f00000010c0)='./file0\x00', 0x4000, 0x20) fork() [ 2114.343732] loop5: detected capacity change from 0 to 2103296 12:19:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="020000001a000100000000000000000000000000000000000000ffffac141400e000000200"/58, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000008213ddaa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5b2343000000a00000800000000000000000c000800080008"], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040032e1d2389dc8669b3e65f99dee06cb231a0000000000ef483699028a0da6000005", @ANYBLOB], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0xa4, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7f, 0x1, 0x4, 0xb2, 0x8, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x64b, 0x4, 0x0, 0x0, 0xfb11, 0x9d6, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x2, 0x9}, {0x7, 0x1}, {0x7, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x1}, {0x7}, {0x0, 0x4}, {}, {0x3, 0x2}, {0x7, 0x2}, {0x5, 0x7}]}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x40840) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r6, 0x5423, 0xffffffffffffffe0) pread64(r6, &(0x7f0000000540)=""/29, 0x1d, 0x1) [ 2114.455571] loop0: detected capacity change from 0 to 2103296 12:19:51 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x1fd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000380)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac14000000000000002000"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xfc}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000240)={0x1, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r2 = fork() ptrace(0x10, r2) 12:19:51 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="beee17bafe95"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x50}}, 0x491) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:51 executing program 2: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250f0000000400028014008f8005000d000100000006000f000100000008000400ff010000"], 0x34}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4000000) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) syz_io_uring_setup(0x4a2d, &(0x7f00000003c0)={0x0, 0x4996, 0x2, 0x0, 0x335, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) creat(&(0x7f00000000c0)='./file0\x00', 0x90) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:19:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x10, r0, 0x0) fork() [ 2114.546475] loop2: detected capacity change from 0 to 2103296 12:19:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r3 = fcntl$dupfd(r2, 0x406, r1) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r4, @ANYRES64]) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000540)={0x81, @tick=0x1, 0x1, {0xff, 0x1f}, 0x2, 0x0, 0x80}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fork() ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000500)={&(0x7f0000000380)=""/2, 0x2}) 12:20:06 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x164a, &(0x7f0000000240)={0x0, 0xb6d8, 0x8, 0x1, 0x8d, 0x0, r0}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x104a) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) listen(r3, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:06 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x11010, 0x84b, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, r3) r4 = getpid() rt_tgsigqueueinfo(r4, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:20:06 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) syz_io_uring_setup(0x578, &(0x7f0000000240)={0x0, 0xad5d, 0x20, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f00000002c0), &(0x7f0000000380)) fork() 12:20:06 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = dup3(r1, r2, 0x80000) lseek(r3, 0x7, 0x3) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000001e00)=""/185, 0xb9}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000001800)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/255, 0xff}, {&(0x7f0000001700)=""/83, 0x53}], 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004db50014000000000000000100000001000000", @ANYRES32, @ANYBLOB="f8000000edd5be03d8d60d74c552bf"], 0x38}}], 0x1, 0x3, &(0x7f0000001840)) sendmsg$nl_xfrm(r5, &(0x7f0000001b00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001880)=@updsa={0x23c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e21, 0x4, 0x4e22, 0x702d, 0xa, 0x40, 0x0, 0x3c, 0x0, r6}, {@in6=@private1, 0x4d2, 0x32}, @in=@remote, {0x8, 0xffffffffffff7c7a, 0x400, 0x5, 0x7, 0x3, 0x2, 0x5}, {0xffffffff, 0x1, 0x4, 0x8}, {0x8, 0x0, 0x3}, 0x70bd26, 0x3506, 0x2, 0x1, 0x2, 0x12}, [@policy={0xac, 0x7, {{@in6=@mcast2, @in=@multicast1, 0x4e22, 0x8, 0x4e23, 0x3, 0xa, 0x80, 0x120, 0x3a, 0x0, 0xee01}, {0xfffffffffffffc01, 0x9, 0x81, 0x20, 0x5, 0x80, 0x5, 0xb8ee}, {0x8000000000000, 0x5, 0x1, 0x5}, 0xf42, 0x6e6bbb, 0x2, 0x1, 0x1, 0x2}}, @algo_auth_trunc={0x9e, 0x14, {{'sha384\x00'}, 0x290, 0xe1936aa64b7a8be2, "2683eeee643b8f92a31a78053e6a0ce757d3eddbf65309f552a8698658d78d79abb3d0523d0c97bc0167492a498e4304fefe4c2ffa5285740b8c6e81db6dd869513867112a8a62812ee762af2345b256a162"}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x100c}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:06 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e756d12877c100"/246], 0x1c) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:06 executing program 6: syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fork() 12:20:06 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x404000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:06 executing program 1: r0 = syz_io_uring_setup(0x68d8, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x1c3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000380)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2129.032136] loop2: detected capacity change from 0 to 2103296 12:20:06 executing program 6: syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fork() 12:20:06 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, r3) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r4 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r2) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x3, 0xe4, 0x20, 0x0, 0x0, 0x41487, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd224, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x807, 0x5, 0x7, 0x3, 0x7fffffff, 0x1ff, 0x5, 0x0, 0x8, 0x0, 0x4}, r6, 0x8, r0, 0x3) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:20:06 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000240)={0x0, 0x274e, 0x0, 0x0, 0x397}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4050, r0, 0x8000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000015002705000000000000000002000000"], 0x14}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r4, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e22, 0x9, @mcast2, 0xffffffff}, 0x0, 0x0, 0x1}, 0x1f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r6 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r5}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r9, 0x5423, 0xffffffffffffffe0) syz_io_uring_submit(r1, r7, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r9, 0xfffffffffffffffb, 0x0, 0x7fff, 0x7, 0x1}, 0x1) fork() 12:20:19 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = getpgid(r1) ptrace(0x4208, r2) 12:20:19 executing program 6: syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fork() 12:20:19 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r2 = getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:20:19 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) r1 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x6, 0x6, &(0x7f00000017c0)=[{&(0x7f00000002c0)="a595e50323aff2e14b99f1e2d70b77232edcafcd151fb30a", 0x18, 0x9}, {&(0x7f0000000600)="4f65ee042d6dd41a73676f424f7886dda271649471a48962c73bae28cf7d5b3980002499fb8eb39b14d073e30086d33864ae92861aa09faaccd28a29da3cb063c41bcd6645d518cb634a0d28d46823975569ab13a196f0cc352dbb01dd64a73378bf916cad75ef2c31806b62ff0febe1792783854b5514ed9016c3feffb4bf0f7e041a3f19bc8c578f11272cfa7b7fa2a4bb0bb85de863c65ae0b43e6394e2fcbdf35ed7724f75a59016d813721c6cd9c6ae07217cd0291f80d3277706fce413d21c9a1f9472f2e76ef91c79", 0xcc, 0x4}, {&(0x7f0000000380)="fab8034f0b928500a671f7935d257517aa4d6d8a3e652ecc73197a605759505b3654bff195920db64fb67fb4862dc9308dd28125f4256f0fef1700be99ba", 0x3e, 0x3f}, {&(0x7f0000000500)="c638833eee4d6a64779acb1a611de27c9495546b52c1255ce2b829981e1fb797cd7f3f975441b718a046093e399899a12d90180073f9e6198d5b4b89a2a6645c1d98c366519f479c22262d5b9b7e7aa43146df7c09c97e24258b8153f06bc68b1b4f1d94683b3f905360f564441288b8a0ad7111442a0f8cf83de3b09647", 0x7e}, {&(0x7f0000000700)="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", 0x1000, 0x9}, {&(0x7f0000001700)="1ef6be97a7e97980996ef238621c686383a6ad2c68b97a0e15d39b375d8ac276f092f28af2eae749517d4e7ad7985cb6a9525a3e069ea3063a07b05288edd85cab8993ea06ccdf454875b61519c0e1a89a955ff506ac9194e71cf4b3cf28c406d0da4c2dca1f695342548e3e8cac1320b0b121a9d0d961243d3e5de5c11c380ecafb46b4eb02ff1aee41f011d9c47ddb06436bd7c0c505a8cab5fcc37d739e69254237a20cd84143", 0xa8}], 0x22040, &(0x7f0000001880)={[{@fat=@codepage={'codepage', 0x3d, '866'}}, {@dots}, {@fat=@gid}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@nodots}, {@fat=@dos1xfloppy}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x37, 0x65, 0x35, 0x65, 0x63, 0x38, 0x34], 0x2d, [0x65, 0x38, 0x31, 0x61], 0x2d, [0x31, 0x66, 0x33, 0x38], 0x2d, [0x37, 0x63, 0x33], 0x2d, [0x61, 0x35, 0x36, 0x37, 0x64, 0x32, 0x62, 0x34]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x37, 0x37, 0x39, 0x64, 0x32, 0x39, 0x36], 0x2d, [0x0, 0x38, 0x30, 0x65], 0x2d, [0x0, 0x62, 0x61, 0x38], 0x2d, [0x61, 0x34, 0x64, 0x62], 0x2d, [0x37, 0x32, 0x34, 0x32, 0x33, 0x33, 0x33, 0x61]}}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x35, 0x39, 0x34, 0x61, 0x0, 0x30], 0x2d, [0x62, 0x38, 0x34, 0x35], 0x2d, [0x66, 0x64, 0x35, 0x34], 0x2d, [0x35, 0x64, 0x63, 0x34], 0x2d, [0x65, 0x32, 0x32, 0x37, 0x66, 0x62, 0x33, 0x66]}}}, {@subj_user={'subj_user', 0x3d, '/dev/vga_arbiter\x00'}}, {@fsname={'fsname', 0x3d, '+'}}, {@obj_role={'obj_role', 0x3d, '/dev/vga_arbiter\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x37, 0x62, 0x65, 0x35, 0x33, 0x35, 0x65], 0x2d, [0x35, 0x66, 0x65, 0x33], 0x2d, [0x36, 0x33, 0x36, 0x61], 0x2d, [0x65, 0x31, 0x0, 0x35], 0x2d, [0x30, 0x62, 0x66, 0x39, 0x31, 0x66, 0x32, 0x36]}}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) dup2(r1, r2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:19 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', 0x0, 0x0, 0x7, &(0x7f0000001100)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x9}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0xffffffffffffff5f, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRES32=r1, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES64]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x10000000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000010c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc000000b441e13b33eb2dd6501ecffe1a000100000000000000000000860a0b335b1051d600000000000000e600000200"/76, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() write$binfmt_elf64(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18e) 12:20:19 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5c0100001500200029bd70000001e00000010000000000000000000000004e22003f4e220002000000809c0000000000000000000000000000000000009b74a0452db711065db75ec103f52191a4b9da4db79f6145755caf085acc2f982e0c2adccbbdf06e0a6387a28d4dcb2e97397f0cee99b704353dd50910953522b529438d", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x15c}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x9ec, &(0x7f0000000380)={0x0, 0x902a, 0x8, 0x0, 0x105}, &(0x7f0000fee000/0x8000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r4, 0x0, &(0x7f0000001780)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000001740)={&(0x7f0000000600)=@sco={0x1f, @none}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/4096, 0x1000}, 0x0, 0x83, 0x1, {0x1}}, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x4, 0x6}}, './file0\x00'}) openat(r5, &(0x7f0000000280)='./file0\x00', 0x0, 0xd) fork() 12:20:19 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x503100, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) r9 = syz_mount_image$tmpfs(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x2, 0x1, &(0x7f0000001a40)=[{&(0x7f00000019c0)="e75078fd70dafa3bf437739c95e72ca6ce59b79ce81cec9f267e696fb9e796fbf7dbc7d360790fe0edb3937ccde1ce97b2a3a793e23379ff92ada2f2725a5914cf4b5bb5f49dc7a1cbf4c4e5809b2a4a22d00c36ff1bd517e5f48e25d3d86ce6a5292affb9805b2af6069fa1f89270dd7bc02ea4b6918a42fa9c1f1825d538b4", 0x80, 0x3}], 0x10, &(0x7f0000001a80)={[{@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x74, 0x74, 0x34, 0x40]}}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x30]}}}}], [{@smackfshat={'smackfshat', 0x3d, '\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0xce450cffc6f12a3, 0x61, 0x34, 0x64, 0x786d3429c53dc78d, 0x30, 0x34], 0x2d, [0x64, 0x39, 0x36, 0x32], 0x2d, [0x37, 0x35, 0x37, 0x36], 0x2d, [0x30, 0x32, 0x65, 0x38], 0x2d, [0x36, 0x36, 0x31, 0x63, 0x30, 0x63, 0x62, 0x37]}}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r10, 0x5423, 0xffffffffffffffe0) sendmsg$netlink(r3, &(0x7f0000001bc0)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc, &(0x7f0000001900)=[{&(0x7f0000000600)={0x12cc, 0x38, 0x2, 0x70bd28, 0x25dfdbfd, "", [@generic="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", @generic="7b9a0d50b1bdc360321fad2ef92d6cd98b3e98c6", @generic="f65165383849df5b8e996f633060e95f", @typed={0x5, 0x63, 0x0, 0x0, @str='\x00'}, @nested={0xce, 0x85, 0x0, 0x1, [@generic="40517886d8f60205e6d11bebb17f6bcd1e4761c228455d59", @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x7f}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r5}, @typed={0x4, 0x2e}, @generic="ec6cb1c2582c8ec7915201dbbfeb3f07212a0863bf6c362b89749259ed1b90e5876398b81667a348318f894b0672c60b6a2c4059cf80b1f5729e74e48bf0576a8d03ae3f089a0ac55f6b09032fd8234a460825ebb9c0fe49aa30e7127fd9fbca82289d9066b1", @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}, @typed={0x8, 0x3d, 0x0, 0x0, @uid=r6}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x75, 0x0, 0x0, @fd=r7}, @generic="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", @generic="b0b6452462bd1efc5628f5e2f94f2869c1e515d712ae1e276c7f55ce19e969", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x736d}, @generic="a5ea0ae8e1cea689c4225b08263a5a3f5ddc45bbbd174275e0554f9a057f37a098435df335ca7e91208254461a6b0f1570e4ba9aeb983fe11d9ad12decb13b9ec77503ac9cc8dc5e051789927ccf7585cd6dedce3c3cd986716b73c1e7223dd0d34bcb0abcf0b4e95a0e702f9ee6109405147a8d2513ec170291f43d345289a6c71fb9c6e07effae91d3b983cb4c5c0203"]}, 0x12cc}], 0x1, &(0x7f0000001b80)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r8, r9, r2, r10]}}], 0x28, 0x4000000}, 0x40000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0x16}, 0x0, 0x6, 0x460, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:19 executing program 2: r0 = syz_io_uring_setup(0x68d7, &(0x7f0000000100)={0x0, 0x58fe, 0x4, 0x0, 0x80000399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f000093f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x6) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x9, {0x0, r0}, 0x9, 0x3, 0x0, {0x0, r8, r9}}, 0xfffffeff) [ 2142.258410] loop0: detected capacity change from 0 to 4096 [ 2142.318517] loop5: detected capacity change from 0 to 2103296 12:20:20 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000084) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:20 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db699ff6ad6238352e651945c35000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a8}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:20 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) mknod(&(0x7f0000000080)='./file0\x00', 0x80, 0x6ded) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:20:20 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f0000000780)='\x00\'7x\xe0\x1c\x02\x00d\x88\xc4\xc4\xf4\x13P\x18\xaf~\xfd\x00\x00\xb1\xedN1\xb7tB\x9d\x7f\x02\x00\x00\x00\xf9\'\xe0$\x05a\xde*\x90\xad\xf7y\xae\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x918\xf7h\xfeGm\x97m\x8c~8\x04\x90\xc2\xe9\xc3\x7f\x00\x00\x00\x8e\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdf\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x9fA\xd9\xd6\x9e\xfcS\xae:}\xb6\x92\x89\x8d\x8c\xec[\xb6\xbd\xc5I\x10o\xcd\xdb\xc4\xcaE\xde\xf2\x91\x89kQ\x99\xc8\x8cTxB\x90\x9e.\x9b}?C\xa6\x89ZW\x13\xff\xff\xff\x7f\xff\xff\xff\xff\xb5<\xe3\na\xa0=9\x16\x05\xad{\xc00\a\f\xc7\xf7_\xf4nI\xec\xfd/^\xf1\x9e\x14\x01\x1e8\xcfR\x00\x00\x00\x00\x00\x00\x00\x00\xdf\x9bZ\x9e$b\xa4\r\r2[\xdd\x87\xe0\xccR\x10\xbe?\xef~?\xdb\xbaI|\xd2\x97]\x9a\xc6;TP\x92\xa7\x9a\xdf~\xac9v\xad\x9b\x96t\xb8\xc1\x18\xa6\x92\x88\xd9\x8d\xd1\x1f\xb7\xa2\x03@T0\xaa\xe1x\xa4\x84r\\\x9di6\x81P1\x90\xa5\xb5\vR\xa7\xe1d\x7f\x15\xd2 \'\x8d-\xdf\x8f\x7f\x1c\x14\xed\xa3\xae\xfd\xcep\xbbe-\x1d\xc6\xe6\xae\x01u\x90\t)*\xa7w^\xd9\xc9\x8c\xcd\xc4\xd3\xd7\xd1T\x86\x12\x99\xe9W(C\x19\'\xe5\xf5~\x00\xd0\xc0\x85\xadh?`\x80\x93\x8e\xbd0&\xbeZ\xb5x\xc9', 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:20 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x494000, 0x0) io_uring_enter(r1, 0x51cc, 0xbf71, 0x0, &(0x7f0000000280)={[0xc21]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1020, 0x0, 0x460, 0x0, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x54001, 0x1) 12:20:20 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:20 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) io_uring_enter(r2, 0x66c4, 0x9b47, 0x1, &(0x7f0000000700)={[0x3]}, 0x8) syz_io_uring_setup(0x40e5, &(0x7f0000000500)={0x0, 0xf65b, 0x20, 0x3, 0x71, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000600)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001500210e0000e61b00000000000002000000"], 0x14}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000006c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000640)=@in6={0xa, 0x4e24, 0x94e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x34) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:20 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = getpgid(r1) ptrace(0x4208, r2) 12:20:20 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r3, &(0x7f0000000080)=""/4095, 0xfff, 0x303) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') rt_tgsigqueueinfo(r2, 0x0, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) pkey_mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x7, r0) 12:20:20 executing program 7: prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:20 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/57, 0x39}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x20, 0x300, 0x70bd26, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40001) 12:20:20 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="70020000210000032dbd7000ffdbdf25ffffffff000000000000000000000000000000000000000000000000000000004e2300684e2300080200a02087000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) r5 = getpgrp(0x0) ptrace(0x10, r5) kcmp(0x0, r5, 0x1, r1, r4) fcntl$setown(0xffffffffffffffff, 0x8, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) syz_open_procfs(r5, &(0x7f0000000380)='personality\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e00000020000000000000000000011000000000000000000000000000000478e5be7e08c5b3221a7b2fe6959d9706e728a3c0cf3b9763554c9662b1f1310978a00960ca33d24c16382b664632a0da1e02f681959d29d2010ff8f34acdf8566daec3d887605cbb3170d0def0f461ddff6bc0b26afe122f63505f8a47f93b7b8a9b18eef0fe900874668623be28d2236a157218d510ec949fd45cc8820785df50f166b24ab63c043d8c8126536c7d5e341d1c97f2054b537d9ded25a61892a3167e664682ca1f317491493ed9c5372c6f790fccd0a8c3637cf0a8dad15e22f7b98dbfb826d44570e14653a435e75e00b0160a024048675461a2126472618d2bb1f2a566d4ac57a1e070000341d19107daf56ff7fd70f0fc62d1f87ee923369ad9eb51962612463a6e43b126cf54c6898ac090ae519c3956258eed39ba624841a5d72b9540c18808431f45d4540dd42daeb01551a675467cf2c1a6b5176d5bb5b30b570659afd3b63f3eb3d354cd88eb87a4629d3176b8318b74e5b88a529ceebf410", @ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x8004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = getpgid(r1) ptrace(0x4208, r2) 12:20:36 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = syz_io_uring_complete(r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000700)=ANY=[@ANYBLOB="01000060ba08000000000000f4c686a8d7e9e4bb8da80357ee96db154000000089fd2a9dec00da42ce3734de2843b7d5d8e553d33454dbead8bdd408f70a", @ANYRES32=r0, @ANYBLOB="8d3a33acfe0ac4862e2f66696c6530f4b8d782005f0426e0bf70bcd772ce99add0229cfe39d01495b45300ad90ea7bbb709e76949a5b3bbf89999d2e12e86ef9cdb2902aed28b8d40a411ecc8f2cfb426c60113108ae75ac8c49939aa19fa16343c5309312fca5d18c7e135ad6c138c1a154ec76e669aa70f67c98726eef983655df6e1a8a5735315b28d5295e0f911c06d2d47419f2b620777969935d761b77c3489dae99d2526942545e6940687d0ec380"]) r4 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0xc, 0x0, 0x0) r5 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x4000005, 0x2b9, 0x0, r4}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r10 = dup(r3) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r10, 0xffffffff00000000, 0x2, 0x2c2905fc, 0x1b, 0x0, {0x2, r11}}, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) write$P9_RRENAME(r12, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000600)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x1, 0xf409, 0x1, 0x0, 0x3]}, &(0x7f0000000540)=0x78) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r8, &(0x7f0000000240)=0x80, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x80800}, 0x800) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x80867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5423, 0xffffffffffffffe0) dup2(r2, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:36 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x11010, 0x84b}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r2) r3 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r4 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r3) r5 = getpid() r6 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r6) pkey_mprotect(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x2000000, r6) rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(r0, 0x1c, 0x1f, 0x8800003) [ 2159.453758] loop1: detected capacity change from 0 to 2103296 12:20:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) 12:20:37 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001500210e00000000000000000210f63d"], 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac0000001d00100025bd7000fedbdf2508001600e50600000c0015005c073500ff0f0000880012006d6f727573363430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0010000800100006674e1b731a30249b57a8f1d8df11d432deec2c62552964f237f0b9c1cdc18822d8676a1a2921d5a35335df67bf518af032175c5877baefd005b9a7d"], 0xac}, 0x1, 0x0, 0x0, 0x200008c0}, 0x8010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:37 executing program 0: r0 = syz_io_uring_setup(0x4fd4, &(0x7f00000010c0)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES64]) r7 = getpgrp(0x0) ptrace(0x10, r7) kcmp(0x0, r7, 0x1, r3, r6) fcntl$setown(0xffffffffffffffff, 0x8, r7) waitid(0x0, r7, 0x0, 0x8, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001580)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd=r2, 0x5, &(0x7f0000001540)=[{&(0x7f00000011c0)="9e34b133595b2cc94484154d643687792fb259565bcbd7aa3d929e54cb33927e26c810c7a648e40989c3e06894f060c348ef97b9820518cc34347bffa2b98c527eee609edf2785fabd18d6766b4f3914946726426c59101300fd7b325890c7281db7247d819edb6b59f1096265d5b9af80e745e1b3397c0eaa54cff642fbfc4d26e38eb2c74308ca95b3d3e2e32de536732cc754fe0d5bdc5346d34b0ec91b", 0x9f}, {&(0x7f0000001280)="2d4d0f7d2666221337d695bd2da830ab494d475498c77afd4222f85dc753d18fbcde80a19e5d2f20637a1da8aca1ef505c833e8a8d150c79628467c8422a940363748c4648a2b2015b013c38c9e2932a1ec577f7463ea9ddfe0d43c4f0ee01628f4238ca130f258661b1a308f6adec823eeacf3f9018affd01b7154170e9431ac8be5814fb5a204891e561a2f87d1e3b81b7ec9d8768f8dd446e2c7cea35cbec5cd09bb18e0b67b9ec7d1e24f549a6", 0xaf}, {&(0x7f0000001340)="c62cc5eb1beba4f752da215552c8793d0288e28402b616813e7e586b484131146be05ae555d8735631cba06f4f7fd8a14e728e7e2cd7481f0f807f5e93c1eb8186f631e6e7cbf5095646d9f18c65195fe21b57bfa4c2f92b0d5e27d7ae42f4eac44ddb14d45d9e234ce051352ab4f44392da567f9a4c3046eee05cc03cbbce8c80590ba4420ec2027aa7d9c2a5ceeaf0c6771eaeeb9777cea4b3c353d89ba847e5334d6bb00faf848bd29a8d43490ab60450aa41d0e8882524ccbd07f0ac43dd0c4822cda7c869e9a8b80da5fb2a0d6b6f", 0xd1}, {&(0x7f0000001440)="69c4d2b04c4bb72609b743e6c364b8138665503a0b59f52ba730092995720dfa65ccf63d25c6de01d6f7d41ac59f9c6a28f56798c935c4947d572d9b2df3f60a6f3139092ed9545107ac1fd508da321f16a00be2b4d0fd7f335909d75c4fe9e4a935410847918ee85fe6395ba7663fc2b2a8d6ebd99bd3fd4df460cba90cf1eefebd426158905b6e58b2a786b9f32f58bd20f552bcd486458ed2c075889fb83405ddc004f80590d11d7096a87c0fe901d36a427341ea2d82a4cb6e95d08924a058", 0xc1}], 0x4, 0x15, 0x1, {0x1}}, 0x1000) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x20, 0x0, 0x8, 0x0, 0x4, 0x104, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x10000, 0x5, 0x10000, 0x5, 0x4, 0x3, 0xfff, 0x0, 0xc8c, 0x0, 0x8}, r7, 0x0, 0xffffffffffffffff, 0x2) 12:20:37 executing program 3: r0 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000380)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r0}) r1 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000004c0)={r0, 0xb8, 0x61}, &(0x7f0000000500)={'enc=', 'raw', ' hash=', {'rmd128-generic\x00'}}, &(0x7f0000000600)="db5275591ac70844a6d3f3b02cceeb4ed8292c2079029bb78654e68704bcce852372e5b7037b7126d151632d87b3708f2c59e6f25756536f080ecde3bfc20747318b25dd11040128b1f0beb995f05ad4f9626881997fcc2f94c706a2ad64947ae4c027a7837a1a8090ec54296cf16afd5ed822d0a68e157b67d1428680fb35f1216e0967f71b5c8bdee3db2c283bffcf713321f4f377409ddf02bc6dd178215ac5eaa952342082d7f53ba13b5ec8319f667be69d83ad7abf", &(0x7f00000006c0)=""/97) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='key_or_keyring:', 0xfffffffffffffff8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:37 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ioprio_get$pid(0x2, r1) 12:20:37 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x18002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@allocspi={0x12b4, 0x16, 0x300, 0x70bd2a, 0x25dfdbfc, {{{@in6=@empty, @in=@private=0xa010102, 0x4e20, 0x80, 0x4e21, 0x68bf, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x4d2, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0xd1f, 0x1, 0x4, 0x81, 0x80000001, 0x6, 0x100, 0x2}, {0x4, 0xb338, 0x7f, 0x3f}, {0x80000001, 0xff, 0xffff969d}, 0x70bd27, 0x3502, 0x2, 0x1, 0x3, 0x1}, 0x6, 0x7ff}, [@address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0xa, 0xff, 0x1}}, @offload={0xc, 0x1c, {r3, 0x1}}, @algo_auth_trunc={0x123, 0x14, {{'sha3-512\x00'}, 0x6b8, 0xa0, "8ec99d31f29f7f5f92255392a0b318ec031664b1a445d3c5cc6870956c54c44109ec320dfcc60de0aceecee49f77a5928c87cef5d10c19af194bf86f574ddf79f53cca63f29a2e2d72d388df39afb0678fe8cc5fb06d42cd8524cb32ee8db27b1d82a27ee6be4456e88a3f2e1193cf46e409f1ff4af43f4fb888171a3ab211ed2f7f877e88ae23c62a8aa0861e7a5e69258ace5097ddd0b2b3a44a45b33cf0a77c8b6bc527884a0b4fb36c82ef225ac8e0513a0de4db2f1638efdf2c571bfc49fbb6ac701c499acf90f43e6b357010df9a0d3374e6f989"}}, @algo_auth_trunc={0x104c, 0x14, {{'sha256-ssse3\x00'}, 0x8000, 0xc0, "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"}}, @extra_flags={0x8, 0x18, 0x401}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2a, 0x9}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) 12:20:37 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = getpgid(r1) ptrace(0x4208, r2) 12:20:37 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001a00010000ad78000000000000000000000000000000ffffac141400e0000002000000c5af2fd00ce9dd2c00040000000000000000000000000000003231a22b7b1323cb1bed30ad8f6ebde5e5f48fcdc84e7fa6f765a132f27fcceddf95297d94333edea159c04a2d621a039e0b246e5319bfed13d5a00f13f02fe7b6f2c434847b74d7a278a16068ae7a2bab1069a1b934de4add311eaef561614f2c4dd35ed475311c622b0d9021813088e0417f2c8614c2663bfbca455b5ca04ff23ea4e9beab6f17abd92fcf1d46164874114b1a263a33ffd29633d701ecd7dd7edd899bc83e2644bf960bfc2dbdf1427af7dfe600b86ebf62ccdbc516dd9dfcfebaeccaed9a0a4f5e92c608c52dd85fc8e351127f4ff84000"/293, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) ptrace$peek(0x1, r3, &(0x7f0000000080)) 12:20:37 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa5b9}, 0x0, 0x0, 0x460, 0x2, 0x0, 0x7, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:37 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_io_uring_setup(0x49fa, &(0x7f0000000240)={0x0, 0x7eb7, 0x10, 0x2, 0x205, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400006007b7e70e000800000000000002000000"], 0x14}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x2021, 0x1, {0x2}}, 0x3f) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:37 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x8010, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001180)={0x10, 0x4, {0x1, @usage=0x3, r3, 0xd55, 0x1, 0x5, 0x4, 0x4, 0x4, @usage=0x7, 0x7, 0x8, [0x1, 0xfff, 0x200, 0x80c0, 0x2, 0xfcb1]}, {0x10000000000, @usage=0xfffffffffffffff9, r5, 0x80000000, 0xb03, 0x401, 0x5af27650, 0x7, 0x400, @struct={0x5, 0x8}, 0x20, 0x8, [0x6, 0x3fffffff800000, 0x3, 0x7, 0x7f, 0x3]}, {0x2, @usage=0x7, 0x0, 0x2000000000000, 0xc1, 0xfffffffffffffffb, 0x37, 0xffff, 0x0, @usage=0x3de, 0x40, 0x8, [0x6, 0x5, 0x5, 0x5, 0x81, 0x3d94423c]}, {0x3, 0x4, 0x1f}}) 12:20:37 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000280)={0x0, 0x9b3, 0x0, 0x0, 0xdf}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x6, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:20:51 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fork() 12:20:51 executing program 3: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) r3 = syz_io_uring_setup(0x41081, &(0x7f0000000280)={0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0xc, 0x0, 0x0) r4 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r3}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x111100, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r9, 0x0, &(0x7f0000000240)="5d937cebf743e170035bc42c8a2d3133343c8872021f", 0x16, 0x40000020, 0x0, {0x0, r10}}, 0xffff) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) ioctl$TIOCGPTPEER(r11, 0x5423, 0xffffffffffffffe0) fcntl$setown(r11, 0x8, r2) 12:20:51 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {0x0}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() getpgid(r1) 12:20:51 executing program 1: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="deffffff1a000100000000000000000000000000000000000000ffffac141400e000000200000000000000000000000000000800000000000000000000000000e0023072be56742e0ea9087dad910ed9468ea8ea9d2dc1bbe81d3ae7fa39a6d49a02fa0caa9aaccc01f2f05c6536bffc9b25c04bf7738d99a9024c2afb74c422249f8208b850660fbe785f5e3281e9711a52b3fe810f3c885e133c60f655a659af45b42c02", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x6000000000000000}, 0x11010, 0x84b, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, r2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) pkey_mprotect(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x2, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0, 0x3) r3 = gettid() pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000000)) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) 12:20:51 executing program 7: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001380)=""/156, 0x9c}, {&(0x7f0000001180)=""/105, 0x69}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000001200)=""/214, 0xd6}], 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000010c0), 0xc}, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES64]) r5 = getpgrp(0x0) ptrace(0x10, r5) kcmp(0x0, r5, 0x1, r1, r4) fcntl$setown(0xffffffffffffffff, 0x8, r5) waitid(0x0, r5, 0x0, 0x8, 0x0) ptrace$setopts(0x4206, r5, 0x389, 0x100048) 12:20:51 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000005a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:51 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) syz_io_uring_submit(r1, 0x0, &(0x7f0000000700)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0xa148}}, 0xfffffffd) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@getpolicy={0xdc, 0x15, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x16ca, 0x4e20, 0x5, 0xa, 0x0, 0x80, 0x21, r5, 0xee00}, 0x6e6bb7, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d3, 0xff}, 0xa, @in6=@loopback, 0x3504, 0x4, 0x1, 0x9, 0x9, 0x10001, 0xf233}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3f}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac14143f000000000000000000000000000000003c000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086e085591f98d597000000000000000000000000ebffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010a00000800000000000000000c0008000800080000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:51 executing program 0: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:52 executing program 2: r0 = syz_io_uring_setup(0x3bda, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0), &(0x7f0000000240)={'L-', 0x7}, 0x16, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 12:20:52 executing program 4: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) r2 = syz_io_uring_setup(0x1081, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0xc, 0x0, 0x0) r3 = syz_io_uring_setup(0xc96, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x5, 0x2b9, 0x0, r2}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r5, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000380)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x8}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() [ 2190.688450] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2190.689805] CPU: 1 PID: 254 Comm: syz-fuzzer Not tainted 5.10.237 #1 [ 2190.690533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.691474] Call Trace: [ 2190.691782] dump_stack+0x107/0x167 [ 2190.692201] dump_header+0x107/0x689 [ 2190.692629] oom_kill_process.cold+0x10/0x15 [ 2190.693133] out_of_memory+0x1149/0x1440 [ 2190.693624] ? oom_killer_disable+0x280/0x280 [ 2190.694137] ? mutex_trylock+0x237/0x2b0 [ 2190.694600] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 2190.695274] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 2190.695948] ? lock_acquire+0x137/0x470 [ 2190.696406] ? warn_alloc+0x190/0x190 [ 2190.696853] __alloc_pages_nodemask+0x51d/0x600 [ 2190.697379] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2190.698070] ? find_get_entry+0x2c8/0x740 [ 2190.698552] alloc_pages_current+0x187/0x280 [ 2190.699056] __page_cache_alloc+0x2d2/0x360 [ 2190.699553] pagecache_get_page+0x2c7/0xc80 [ 2190.700047] filemap_fault+0x177d/0x2210 [ 2190.700514] ? read_cache_page_gfp+0x30/0x30 [ 2190.701012] ? replace_page_cache_page+0x1200/0x1200 [ 2190.701606] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2190.702208] ext4_filemap_fault+0x87/0xc0 [ 2190.702681] __do_fault+0x113/0x410 [ 2190.703097] handle_mm_fault+0x1e53/0x3500 [ 2190.703582] ? find_held_lock+0x2c/0x110 [ 2190.704043] ? __pmd_alloc+0x5e0/0x5e0 [ 2190.704498] ? vmacache_find+0x55/0x2a0 [ 2190.704963] do_user_addr_fault+0x56e/0xc60 [ 2190.705462] exc_page_fault+0xa2/0x1a0 [ 2190.705916] ? asm_exc_page_fault+0x8/0x30 [ 2190.706396] asm_exc_page_fault+0x1e/0x30 [ 2190.706865] RIP: 0033:0x44d610 [ 2190.707231] Code: Unable to access opcode bytes at RIP 0x44d5e6. [ 2190.707919] RSP: 002b:00007ffeaa3fa2c0 EFLAGS: 00010202 [ 2190.708521] RAX: 000000c00bbdd3f8 RBX: 0000000001f21040 RCX: 000000c000000180 [ 2190.709335] RDX: 0000000000000000 RSI: 000000c000000180 RDI: 000000c00029c538 [ 2190.710154] RBP: 000000c00bbdd4a8 R08: 0000000000000801 R09: 00007ffeaa4ab080 [ 2190.710976] R10: 00007ffeaa4ab090 R11: 00000000003f2786 R12: 0000000000000000 [ 2190.711777] R13: 0000000000000001 R14: 000001fe16499b2a R15: 0000000000000000 [ 2190.712668] Mem-Info: [ 2190.712962] active_anon:943 inactive_anon:78595 isolated_anon:0 [ 2190.712962] active_file:27 inactive_file:43 isolated_file:0 [ 2190.712962] unevictable:0 dirty:0 writeback:0 [ 2190.712962] slab_reclaimable:7156 slab_unreclaimable:71836 [ 2190.712962] mapped:69642 shmem:113 pagetables:7917 bounce:0 [ 2190.712962] free:2890 free_pcp:121 free_cma:0 [ 2190.716427] Node 0 active_anon:3772kB inactive_anon:314380kB active_file:108kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278568kB dirty:0kB writeback:0kB shmem:452kB writeback_tmp:0kB kernel_stack:10912kB all_unreclaimable? yes [ 2190.718933] Node 0 DMA free:6512kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:1116kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2190.721762] lowmem_reserve[]: 0 1616 1616 1616 [ 2190.722285] Node 0 DMA32 free:5048kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:3772kB inactive_anon:313264kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:31668kB bounce:0kB free_pcp:484kB local_pcp:244kB free_cma:0kB [ 2190.725307] lowmem_reserve[]: 0 0 0 0 [ 2190.725736] Node 0 DMA: 6*4kB (UM) 5*8kB (UM) 1*16kB (M) 1*32kB (M) 4*64kB (UM) 2*128kB (U) 3*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 1*4096kB (M) = 6512kB [ 2190.727385] Node 0 DMA32: 1035*4kB (UM) 121*8kB (ME) 4*16kB (ME) 5*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5332kB [ 2190.728843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2190.729760] 174 total pagecache pages [ 2190.730238] 0 pages in swap cache [ 2190.730607] Swap cache stats: add 0, delete 0, find 0/0 [ 2190.731185] Free swap = 0kB [ 2190.731506] Total swap = 0kB [ 2190.731827] 524158 pages RAM [ 2190.732162] 0 pages HighMem/MovableOnly [ 2190.732581] 105069 pages reserved [ 2190.732977] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=254,uid=0 [ 2190.735310] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1240212kB, anon-rss:259148kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:980kB oom_score_adj:0 VM DIAGNOSIS: 12:21:09 Registers: info registers vcpu 0 RAX=0000000000000050 RBX=ffff88800f4c0000 RCX=ffffffff81f485d4 RDX=00000000000001f7 RSI=ffffffff81f485e2 RDI=0000000000000007 RBP=00000000000101f7 RSP=ffff888016dc7090 R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=ffffed1001e98001 R13=dffffc0000000000 R14=ffffffff853a0200 R15=ffff88800f4c0008 RIP=ffffffff81f485e6 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe278cb9900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe27959f5e0 CR3=000000001b24e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=736f6c63206e6f697463656e6e6f4300 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81472bcd RDX=0000000000000000 RSI=ffffffff81472bdf RDI=0000000000000005 RBP=ffff888000000000 RSP=ffff8880089bfc30 R8 =0000000000000000 R9 =ffffffff8567874f R10=0000000000000000 R11=0000000000000001 R12=ffff8880089bfca8 R13=ffff888017cc2f30 R14=0000000000000206 R15=ffff888017cc2f30 RIP=ffffffff8140bce4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffb32eeff8 CR3=000000001b580000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2039303a31323a32312038312079614d XMM01=6964206465766965636552203a5d3834 XMM02=6f63736964203a31313a383335303420 XMM03=7266207463656e6e6f63736964206465 XMM04=6f697461746e656d656c706d69206563 XMM05=6f6976657270206120666f206e6f6974 XMM06=736574616369646e6920796c6c617573 XMM07=79732072656c6c616b7a79732039303a XMM08=30323a746e657365727020426b303a67 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000