fffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:15 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed", 0xec}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:48:15 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07e", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:15 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:15 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfb", 0xf0}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:48:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r4 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:48:29 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 1) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:48:29 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:29 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfb", 0xf0}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:48:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1290.163326] FAULT_INJECTION: forcing a failure. [ 1290.163326] name failslab, interval 1, probability 0, space 0, times 1 [ 1290.164220] FAULT_INJECTION: forcing a failure. [ 1290.164220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1290.165159] CPU: 1 PID: 8418 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1290.168619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.169684] Call Trace: [ 1290.170027] dump_stack+0x107/0x167 [ 1290.170495] should_fail.cold+0x5/0xa [ 1290.170994] should_failslab+0x5/0x20 [ 1290.171483] kmem_cache_alloc_bulk+0x4b/0x320 [ 1290.172075] io_submit_sqes+0x6fe6/0x8610 [ 1290.172626] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.173254] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.173870] ? find_held_lock+0x2c/0x110 [ 1290.174388] ? io_submit_sqes+0x8610/0x8610 [ 1290.174944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1290.175563] ? wait_for_completion_io+0x270/0x270 [ 1290.176176] ? rcu_read_lock_any_held+0x75/0xa0 [ 1290.176768] ? vfs_write+0x354/0xb10 [ 1290.177243] ? fput_many+0x2f/0x1a0 [ 1290.177709] ? ksys_write+0x1a9/0x260 [ 1290.178194] ? __ia32_sys_read+0xb0/0xb0 [ 1290.178716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.179381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.180045] do_syscall_64+0x33/0x40 [ 1290.180517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.181170] RIP: 0033:0x7fa22a0e6b19 [ 1290.181641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.183992] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1290.184960] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1290.185863] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1290.186767] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.187693] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1290.188599] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1290.189554] CPU: 0 PID: 8415 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1290.191141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.193067] Call Trace: [ 1290.193683] dump_stack+0x107/0x167 [ 1290.194523] should_fail.cold+0x5/0xa [ 1290.195407] _copy_from_user+0x2e/0x1b0 [ 1290.196340] __copy_msghdr_from_user+0x91/0x4b0 [ 1290.197418] ? __ia32_sys_shutdown+0x80/0x80 [ 1290.198437] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1290.199657] ? __lock_acquire+0x1657/0x5b00 [ 1290.200663] ? __lock_acquire+0xbb1/0x5b00 [ 1290.201650] sendmsg_copy_msghdr+0xa1/0x160 [ 1290.202656] ? do_recvmmsg+0x6d0/0x6d0 [ 1290.203567] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1290.204766] ? lock_downgrade+0x6d0/0x6d0 [ 1290.205730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1290.206940] ___sys_sendmsg+0xc6/0x170 [ 1290.207852] ? sendmsg_copy_msghdr+0x160/0x160 [ 1290.208915] ? __fget_files+0x2cf/0x520 [ 1290.209835] ? lock_downgrade+0x6d0/0x6d0 [ 1290.210794] ? find_held_lock+0x2c/0x110 [ 1290.211753] ? __fget_files+0x2f8/0x520 [ 1290.212681] ? __fget_light+0xea/0x290 [ 1290.213590] __sys_sendmsg+0xe5/0x1b0 [ 1290.214471] ? __sys_sendmsg_sock+0x40/0x40 [ 1290.215467] ? rcu_read_lock_any_held+0x75/0xa0 [ 1290.216548] ? fput_many+0x2f/0x1a0 [ 1290.217389] ? ksys_write+0x1a9/0x260 20:48:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfb", 0xf0}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1290.218268] ? __ia32_sys_read+0xb0/0xb0 [ 1290.219385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.220613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.221805] do_syscall_64+0x33/0x40 [ 1290.222664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.223858] RIP: 0033:0x7fe269824b19 [ 1290.224713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.228978] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1290.230739] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1290.232415] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1290.234064] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.235730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.237379] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:48:29 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1290.329716] FAULT_INJECTION: forcing a failure. [ 1290.329716] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.332526] CPU: 0 PID: 8440 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1290.334108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.336039] Call Trace: [ 1290.336655] dump_stack+0x107/0x167 [ 1290.337503] should_fail.cold+0x5/0xa 20:48:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb13", 0xf2}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1290.338393] ? create_object.isra.0+0x3a/0xa20 [ 1290.339619] should_failslab+0x5/0x20 [ 1290.340503] kmem_cache_alloc+0x5b/0x310 [ 1290.341449] create_object.isra.0+0x3a/0xa20 [ 1290.342463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1290.343651] kmem_cache_alloc_bulk+0x168/0x320 [ 1290.344725] io_submit_sqes+0x6fe6/0x8610 [ 1290.345715] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.346868] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.348004] ? io_submit_sqes+0x8610/0x8610 [ 1290.349001] ? recalibrate_cpu_khz+0x10/0x10 [ 1290.350017] ? ktime_get+0x158/0x1f0 [ 1290.350882] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1290.351885] ? clockevents_program_event+0x131/0x360 [ 1290.353061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.354272] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1290.355516] ? trace_hardirqs_on+0x5b/0x180 [ 1290.356532] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1290.357793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.358986] do_syscall_64+0x33/0x40 [ 1290.359854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.361036] RIP: 0033:0x7fa22a0e6b19 [ 1290.361893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.366100] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1290.367819] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1290.369427] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1290.371043] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.372663] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1290.374267] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:48:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:44 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 2) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:48:44 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:44 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb13", 0xf2}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:48:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:48:44 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) 20:48:44 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1304.803071] FAULT_INJECTION: forcing a failure. [ 1304.803071] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.806206] CPU: 0 PID: 8472 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1304.807919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.809990] Call Trace: [ 1304.810651] dump_stack+0x107/0x167 [ 1304.811559] should_fail.cold+0x5/0xa [ 1304.812507] ? create_object.isra.0+0x3a/0xa20 [ 1304.813637] should_failslab+0x5/0x20 [ 1304.814574] kmem_cache_alloc+0x5b/0x310 [ 1304.815568] ? mark_held_locks+0x9e/0xe0 [ 1304.816575] create_object.isra.0+0x3a/0xa20 [ 1304.817647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1304.818895] kmem_cache_alloc_bulk+0x168/0x320 [ 1304.820034] io_submit_sqes+0x6fe6/0x8610 [ 1304.821083] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1304.822302] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1304.823500] ? find_held_lock+0x2c/0x110 [ 1304.824275] FAULT_INJECTION: forcing a failure. [ 1304.824275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.824508] ? io_submit_sqes+0x8610/0x8610 [ 1304.824536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1304.824559] ? wait_for_completion_io+0x270/0x270 [ 1304.824583] ? rcu_read_lock_any_held+0x75/0xa0 [ 1304.824611] ? vfs_write+0x354/0xb10 [ 1304.832649] ? fput_many+0x2f/0x1a0 [ 1304.833536] ? ksys_write+0x1a9/0x260 [ 1304.834461] ? __ia32_sys_read+0xb0/0xb0 [ 1304.835456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.836743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.837996] do_syscall_64+0x33/0x40 [ 1304.838899] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.840149] RIP: 0033:0x7fa22a0e6b19 [ 1304.841042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.845481] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1304.847315] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1304.849037] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1304.850751] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.852477] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1304.854194] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1304.855935] CPU: 1 PID: 8469 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1304.857546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1304.859492] Call Trace: [ 1304.860123] dump_stack+0x107/0x167 [ 1304.860973] should_fail.cold+0x5/0xa [ 1304.861862] _copy_from_user+0x2e/0x1b0 [ 1304.862786] iovec_from_user+0x141/0x400 [ 1304.863740] __import_iovec+0x67/0x590 [ 1304.864642] ? __ia32_sys_shutdown+0x80/0x80 [ 1304.865661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1304.866882] import_iovec+0x83/0xb0 [ 1304.867740] sendmsg_copy_msghdr+0x131/0x160 [ 1304.868756] ? do_recvmmsg+0x6d0/0x6d0 [ 1304.869664] ? lock_downgrade+0x6d0/0x6d0 [ 1304.870627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1304.871854] ___sys_sendmsg+0xc6/0x170 [ 1304.872759] ? sendmsg_copy_msghdr+0x160/0x160 [ 1304.873825] ? __fget_files+0x2cf/0x520 [ 1304.874748] ? lock_downgrade+0x6d0/0x6d0 [ 1304.875708] ? find_held_lock+0x2c/0x110 [ 1304.876671] ? __fget_files+0x2f8/0x520 [ 1304.877600] ? __fget_light+0xea/0x290 [ 1304.878512] __sys_sendmsg+0xe5/0x1b0 [ 1304.879394] ? __sys_sendmsg_sock+0x40/0x40 [ 1304.880399] ? rcu_read_lock_any_held+0x75/0xa0 [ 1304.881479] ? fput_many+0x2f/0x1a0 [ 1304.882324] ? ksys_write+0x1a9/0x260 [ 1304.883213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1304.884436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1304.885632] do_syscall_64+0x33/0x40 [ 1304.886494] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1304.887679] RIP: 0033:0x7fe269824b19 [ 1304.888543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1304.892806] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.894582] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1304.896253] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 20:48:44 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) [ 1304.897915] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.899814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.901457] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:48:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:48:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb13", 0xf2}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:48:44 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", 0x0}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:48:44 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:48:44 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) 20:48:44 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 3) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:48:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1305.179937] FAULT_INJECTION: forcing a failure. [ 1305.179937] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.182868] CPU: 1 PID: 8496 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1305.184452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.186361] Call Trace: [ 1305.186971] dump_stack+0x107/0x167 [ 1305.187819] should_fail.cold+0x5/0xa [ 1305.188696] ? create_object.isra.0+0x3a/0xa20 [ 1305.189749] should_failslab+0x5/0x20 [ 1305.190626] kmem_cache_alloc+0x5b/0x310 [ 1305.191561] ? mark_held_locks+0x9e/0xe0 [ 1305.192506] create_object.isra.0+0x3a/0xa20 [ 1305.193513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1305.194685] kmem_cache_alloc_bulk+0x168/0x320 [ 1305.195754] io_submit_sqes+0x6fe6/0x8610 [ 1305.196740] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.197886] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1305.198998] ? find_held_lock+0x2c/0x110 [ 1305.199947] ? io_submit_sqes+0x8610/0x8610 [ 1305.200945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1305.202059] ? wait_for_completion_io+0x270/0x270 [ 1305.203170] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.204248] ? vfs_write+0x354/0xb10 [ 1305.205106] ? fput_many+0x2f/0x1a0 [ 1305.205943] ? ksys_write+0x1a9/0x260 [ 1305.206818] ? __ia32_sys_read+0xb0/0xb0 [ 1305.207761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.208968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.210156] do_syscall_64+0x33/0x40 [ 1305.211012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.212200] RIP: 0033:0x7fa22a0e6b19 [ 1305.213053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.217293] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1305.219049] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1305.220698] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1305.222335] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.223982] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1305.225626] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1305.249243] FAULT_INJECTION: forcing a failure. [ 1305.249243] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.252248] CPU: 0 PID: 8498 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1305.253884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.255883] Call Trace: [ 1305.256515] dump_stack+0x107/0x167 [ 1305.257384] should_fail.cold+0x5/0xa [ 1305.258284] ? __alloc_skb+0x6d/0x5b0 [ 1305.259179] should_failslab+0x5/0x20 [ 1305.260079] kmem_cache_alloc_node+0x55/0x330 [ 1305.261141] __alloc_skb+0x6d/0x5b0 [ 1305.261996] netlink_sendmsg+0x998/0xe00 [ 1305.262956] ? netlink_unicast+0x800/0x800 [ 1305.263962] ? netlink_unicast+0x800/0x800 [ 1305.264950] __sock_sendmsg+0x154/0x190 [ 1305.265884] ____sys_sendmsg+0x70d/0x870 [ 1305.266838] ? sock_write_iter+0x3d0/0x3d0 [ 1305.267825] ? do_recvmmsg+0x6d0/0x6d0 [ 1305.268735] ? lock_downgrade+0x6d0/0x6d0 [ 1305.269702] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1305.270922] ___sys_sendmsg+0xf3/0x170 [ 1305.271842] ? sendmsg_copy_msghdr+0x160/0x160 [ 1305.272905] ? __fget_files+0x2cf/0x520 [ 1305.273824] ? lock_downgrade+0x6d0/0x6d0 [ 1305.274784] ? find_held_lock+0x2c/0x110 [ 1305.275742] ? __fget_files+0x2f8/0x520 [ 1305.276672] ? __fget_light+0xea/0x290 [ 1305.277578] __sys_sendmsg+0xe5/0x1b0 [ 1305.278454] ? __sys_sendmsg_sock+0x40/0x40 [ 1305.279444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.280539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.281746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.282939] do_syscall_64+0x33/0x40 [ 1305.283807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1305.284989] RIP: 0033:0x7fe269824b19 [ 1305.285844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.290097] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.291856] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1305.293512] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1305.295168] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.296829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.298483] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:49:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:49:03 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 5) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", 0x0}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000002c0)) 20:49:03 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 4) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1323.932143] FAULT_INJECTION: forcing a failure. [ 1323.932143] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.933825] CPU: 1 PID: 8524 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1323.934780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.935919] Call Trace: [ 1323.936300] dump_stack+0x107/0x167 [ 1323.936811] should_fail.cold+0x5/0xa [ 1323.937338] ? create_object.isra.0+0x3a/0xa20 [ 1323.937972] should_failslab+0x5/0x20 [ 1323.938497] kmem_cache_alloc+0x5b/0x310 [ 1323.939066] create_object.isra.0+0x3a/0xa20 [ 1323.939671] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1323.940262] kmem_cache_alloc_node+0x169/0x330 [ 1323.940902] __alloc_skb+0x6d/0x5b0 [ 1323.941321] netlink_sendmsg+0x998/0xe00 [ 1323.941887] ? netlink_unicast+0x800/0x800 [ 1323.942475] ? netlink_unicast+0x800/0x800 [ 1323.943056] __sock_sendmsg+0x154/0x190 [ 1323.943601] ____sys_sendmsg+0x70d/0x870 [ 1323.944171] ? sock_write_iter+0x3d0/0x3d0 [ 1323.944755] ? do_recvmmsg+0x6d0/0x6d0 [ 1323.945296] ? lock_downgrade+0x6d0/0x6d0 [ 1323.945877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1323.946602] ___sys_sendmsg+0xf3/0x170 [ 1323.947142] ? sendmsg_copy_msghdr+0x160/0x160 [ 1323.947773] ? __fget_files+0x2cf/0x520 [ 1323.948234] ? lock_downgrade+0x6d0/0x6d0 [ 1323.948703] ? find_held_lock+0x2c/0x110 [ 1323.949268] ? __fget_files+0x2f8/0x520 [ 1323.949751] ? __fget_light+0xea/0x290 [ 1323.950293] __sys_sendmsg+0xe5/0x1b0 [ 1323.950727] ? __sys_sendmsg_sock+0x40/0x40 [ 1323.951320] ? rcu_read_lock_any_held+0x75/0xa0 [ 1323.951888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1323.952608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.953318] do_syscall_64+0x33/0x40 [ 1323.953757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.954456] RIP: 0033:0x7fe269824b19 [ 1323.954895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.957438] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.958493] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1323.959487] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1323.960501] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.961511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.962499] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 [ 1323.975391] FAULT_INJECTION: forcing a failure. [ 1323.975391] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.977088] CPU: 1 PID: 8513 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1323.978039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.979188] Call Trace: 20:49:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", 0x0}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1323.979556] dump_stack+0x107/0x167 [ 1323.980304] should_fail.cold+0x5/0xa [ 1323.980834] ? create_object.isra.0+0x3a/0xa20 [ 1323.981474] should_failslab+0x5/0x20 [ 1323.982001] kmem_cache_alloc+0x5b/0x310 [ 1323.982568] ? mark_held_locks+0x9e/0xe0 [ 1323.983145] create_object.isra.0+0x3a/0xa20 [ 1323.983766] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1323.984488] kmem_cache_alloc_bulk+0x168/0x320 [ 1323.985125] io_submit_sqes+0x6fe6/0x8610 [ 1323.985715] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1323.986412] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1323.987078] ? find_held_lock+0x2c/0x110 [ 1323.987640] ? io_submit_sqes+0x8610/0x8610 [ 1323.988243] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1323.988911] ? wait_for_completion_io+0x270/0x270 [ 1323.989582] ? rcu_read_lock_any_held+0x75/0xa0 [ 1323.990222] ? vfs_write+0x354/0xb10 [ 1323.990736] ? fput_many+0x2f/0x1a0 [ 1323.991242] ? ksys_write+0x1a9/0x260 [ 1323.991770] ? __ia32_sys_read+0xb0/0xb0 [ 1323.992344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1323.993066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1323.993781] do_syscall_64+0x33/0x40 [ 1323.994296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1323.994995] RIP: 0033:0x7fa22a0e6b19 [ 1323.995500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.998033] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1323.999081] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1323.999897] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1324.000901] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1324.001720] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1324.002713] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:49:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000002c0)) 20:49:03 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 5) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1324.089198] FAULT_INJECTION: forcing a failure. [ 1324.089198] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.091898] CPU: 0 PID: 8535 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1324.093408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1324.095216] Call Trace: [ 1324.095797] dump_stack+0x107/0x167 [ 1324.096594] should_fail.cold+0x5/0xa [ 1324.097425] should_failslab+0x5/0x20 [ 1324.098249] __kmalloc_node_track_caller+0x74/0x3b0 [ 1324.099343] ? netlink_sendmsg+0x998/0xe00 [ 1324.100282] __alloc_skb+0xb1/0x5b0 [ 1324.101082] netlink_sendmsg+0x998/0xe00 [ 1324.101967] ? netlink_unicast+0x800/0x800 [ 1324.102888] ? netlink_unicast+0x800/0x800 [ 1324.103802] __sock_sendmsg+0x154/0x190 [ 1324.104667] ____sys_sendmsg+0x70d/0x870 [ 1324.105550] ? sock_write_iter+0x3d0/0x3d0 [ 1324.106458] ? do_recvmmsg+0x6d0/0x6d0 [ 1324.107299] ? lock_downgrade+0x6d0/0x6d0 [ 1324.108200] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1324.109331] ___sys_sendmsg+0xf3/0x170 [ 1324.110175] ? sendmsg_copy_msghdr+0x160/0x160 [ 1324.111168] ? __fget_files+0x2cf/0x520 [ 1324.112034] ? lock_downgrade+0x6d0/0x6d0 [ 1324.112921] ? find_held_lock+0x2c/0x110 [ 1324.113803] ? __fget_files+0x2f8/0x520 [ 1324.114664] ? __fget_light+0xea/0x290 [ 1324.115509] __sys_sendmsg+0xe5/0x1b0 [ 1324.116341] ? __sys_sendmsg_sock+0x40/0x40 [ 1324.117272] ? rcu_read_lock_any_held+0x75/0xa0 [ 1324.118288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1324.119424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1324.120545] do_syscall_64+0x33/0x40 [ 1324.121342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1324.122441] RIP: 0033:0x7fe269824b19 [ 1324.123237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.127218] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.128870] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1324.130402] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1324.131933] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1324.133480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.135019] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:49:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:49:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:16 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 6) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:16 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:16 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000002c0)) 20:49:16 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 6) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {0x0}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:16 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:49:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1336.806897] FAULT_INJECTION: forcing a failure. [ 1336.806897] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.809813] CPU: 0 PID: 8558 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1336.811394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.813287] Call Trace: 20:49:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {0x0}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1336.813883] dump_stack+0x107/0x167 [ 1336.814889] should_fail.cold+0x5/0xa [ 1336.815755] ? create_object.isra.0+0x3a/0xa20 [ 1336.816805] should_failslab+0x5/0x20 [ 1336.817664] kmem_cache_alloc+0x5b/0x310 [ 1336.818599] create_object.isra.0+0x3a/0xa20 [ 1336.819588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1336.820759] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1336.821904] ? netlink_sendmsg+0x998/0xe00 [ 1336.822863] __alloc_skb+0xb1/0x5b0 [ 1336.823694] netlink_sendmsg+0x998/0xe00 [ 1336.824630] ? netlink_unicast+0x800/0x800 [ 1336.825593] ? netlink_unicast+0x800/0x800 [ 1336.826551] __sock_sendmsg+0x154/0x190 [ 1336.827453] ____sys_sendmsg+0x70d/0x870 [ 1336.828393] ? sock_write_iter+0x3d0/0x3d0 [ 1336.829344] ? do_recvmmsg+0x6d0/0x6d0 [ 1336.830226] ? lock_downgrade+0x6d0/0x6d0 [ 1336.831160] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1336.832362] ___sys_sendmsg+0xf3/0x170 [ 1336.833243] ? sendmsg_copy_msghdr+0x160/0x160 [ 1336.834273] ? __fget_files+0x2cf/0x520 [ 1336.835165] ? lock_downgrade+0x6d0/0x6d0 [ 1336.836105] ? find_held_lock+0x2c/0x110 [ 1336.837035] ? __fget_files+0x2f8/0x520 [ 1336.837938] ? __fget_light+0xea/0x290 [ 1336.838821] __sys_sendmsg+0xe5/0x1b0 [ 1336.839679] ? __sys_sendmsg_sock+0x40/0x40 [ 1336.840661] ? rcu_read_lock_any_held+0x75/0xa0 [ 1336.841732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1336.842919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.844079] do_syscall_64+0x33/0x40 [ 1336.844921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1336.846077] RIP: 0033:0x7fe269824b19 [ 1336.846929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.851065] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.852787] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1336.854388] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1336.855978] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.857573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.859167] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:49:16 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000002c0)) 20:49:16 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1336.879414] FAULT_INJECTION: forcing a failure. [ 1336.879414] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.880817] CPU: 1 PID: 8571 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1336.881658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.882680] Call Trace: [ 1336.883016] dump_stack+0x107/0x167 [ 1336.883475] should_fail.cold+0x5/0xa [ 1336.883952] ? create_object.isra.0+0x3a/0xa20 [ 1336.884530] should_failslab+0x5/0x20 [ 1336.885002] kmem_cache_alloc+0x5b/0x310 [ 1336.885508] ? mark_held_locks+0x9e/0xe0 [ 1336.886017] create_object.isra.0+0x3a/0xa20 [ 1336.886567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1336.887201] kmem_cache_alloc_bulk+0x168/0x320 [ 1336.887762] io_submit_sqes+0x6fe6/0x8610 [ 1336.888299] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1336.888931] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1336.889523] ? find_held_lock+0x2c/0x110 [ 1336.890021] ? io_submit_sqes+0x8610/0x8610 [ 1336.890550] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1336.891141] ? wait_for_completion_io+0x270/0x270 [ 1336.891727] ? rcu_read_lock_any_held+0x75/0xa0 [ 1336.892299] ? vfs_write+0x354/0xb10 [ 1336.892758] ? fput_many+0x2f/0x1a0 [ 1336.893202] ? ksys_write+0x1a9/0x260 [ 1336.893666] ? __ia32_sys_read+0xb0/0xb0 [ 1336.894163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1336.894800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.895428] do_syscall_64+0x33/0x40 [ 1336.895882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1336.896511] RIP: 0033:0x7fa22a0e6b19 [ 1336.896965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.899218] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1336.900153] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1336.901017] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1336.901881] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.902744] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1336.903608] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:49:29 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 7) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:29 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000002c0)) [ 1350.427941] FAULT_INJECTION: forcing a failure. [ 1350.427941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.430906] CPU: 0 PID: 8592 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1350.432489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.434394] Call Trace: [ 1350.435000] dump_stack+0x107/0x167 [ 1350.435837] should_fail.cold+0x5/0xa [ 1350.436732] _copy_from_iter_full+0x201/0xa60 [ 1350.437758] ? __virt_addr_valid+0x170/0x5d0 [ 1350.438762] ? __check_object_size+0x319/0x440 [ 1350.439810] netlink_sendmsg+0x879/0xe00 [ 1350.440750] ? netlink_unicast+0x800/0x800 [ 1350.441729] ? netlink_unicast+0x800/0x800 [ 1350.442710] __sock_sendmsg+0x154/0x190 [ 1350.443626] ____sys_sendmsg+0x70d/0x870 [ 1350.444575] ? sock_write_iter+0x3d0/0x3d0 [ 1350.444955] FAULT_INJECTION: forcing a failure. [ 1350.444955] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.445536] ? do_recvmmsg+0x6d0/0x6d0 [ 1350.445562] ? lock_downgrade+0x6d0/0x6d0 [ 1350.445588] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1350.450230] ___sys_sendmsg+0xf3/0x170 [ 1350.451120] ? sendmsg_copy_msghdr+0x160/0x160 [ 1350.452165] ? __fget_files+0x2cf/0x520 [ 1350.453078] ? lock_downgrade+0x6d0/0x6d0 [ 1350.454024] ? find_held_lock+0x2c/0x110 [ 1350.454958] ? __fget_files+0x2f8/0x520 [ 1350.455872] ? __fget_light+0xea/0x290 [ 1350.456773] __sys_sendmsg+0xe5/0x1b0 [ 1350.457642] ? __sys_sendmsg_sock+0x40/0x40 [ 1350.458624] ? rcu_read_lock_any_held+0x75/0xa0 [ 1350.459703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.460904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.462080] do_syscall_64+0x33/0x40 [ 1350.462930] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.464097] RIP: 0033:0x7fe269824b19 [ 1350.464954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.469162] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.470915] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1350.472573] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1350.474169] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.475762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.477367] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 [ 1350.479000] CPU: 1 PID: 8606 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1350.479996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.481201] Call Trace: [ 1350.481593] dump_stack+0x107/0x167 [ 1350.481609] should_fail.cold+0x5/0xa [ 1350.481625] ? create_object.isra.0+0x3a/0xa20 [ 1350.481640] should_failslab+0x5/0x20 [ 1350.481655] kmem_cache_alloc+0x5b/0x310 [ 1350.481670] ? mark_held_locks+0x9e/0xe0 [ 1350.481685] create_object.isra.0+0x3a/0xa20 [ 1350.481696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 20:49:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {0x0}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:29 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:49:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:29 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1350.481730] kmem_cache_alloc_bulk+0x168/0x320 [ 1350.481749] io_submit_sqes+0x6fe6/0x8610 [ 1350.481781] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1350.481793] __do_sys_io_uring_enter+0x6b2/0x1890 20:49:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1350.481808] ? find_held_lock+0x2c/0x110 [ 1350.481825] ? io_submit_sqes+0x8610/0x8610 [ 1350.481842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1350.481856] ? wait_for_completion_io+0x270/0x270 [ 1350.481872] ? rcu_read_lock_any_held+0x75/0xa0 [ 1350.481884] ? vfs_write+0x354/0xb10 20:49:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000002c0)) [ 1350.481897] ? fput_many+0x2f/0x1a0 [ 1350.481910] ? ksys_write+0x1a9/0x260 [ 1350.481924] ? __ia32_sys_read+0xb0/0xb0 [ 1350.481939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 20:49:29 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 8) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1350.481953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.481968] do_syscall_64+0x33/0x40 [ 1350.481981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 20:49:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1350.481990] RIP: 0033:0x7fa22a0e6b19 [ 1350.482002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.482009] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1350.482023] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1350.482030] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1350.482038] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.482046] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1350.482054] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1350.605188] FAULT_INJECTION: forcing a failure. [ 1350.605188] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.613367] CPU: 1 PID: 8617 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1350.614307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1350.615466] Call Trace: [ 1350.615833] dump_stack+0x107/0x167 [ 1350.616339] should_fail.cold+0x5/0xa [ 1350.616888] ? __alloc_skb+0x6d/0x5b0 [ 1350.617436] should_failslab+0x5/0x20 [ 1350.617982] kmem_cache_alloc_node+0x55/0x330 [ 1350.618629] __alloc_skb+0x6d/0x5b0 [ 1350.619155] netlink_dump+0x729/0x1070 [ 1350.619714] ? __netlink_kernel_create+0x860/0x860 [ 1350.620436] ? lock_downgrade+0x6d0/0x6d0 [ 1350.621034] __netlink_dump_start+0x62e/0x8e0 [ 1350.621681] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1350.622287] ? do_set_master+0x230/0x230 [ 1350.622870] ? rtnl_fdb_dump+0xa30/0xa30 [ 1350.623457] ? do_set_master+0x230/0x230 [ 1350.624040] ? lock_acquire+0x197/0x470 [ 1350.624615] ? netlink_deliver_tap+0xf4/0xcc0 [ 1350.625261] netlink_rcv_skb+0x14b/0x430 [ 1350.625842] ? rtnl_fdb_dump+0xa30/0xa30 [ 1350.626430] ? netlink_ack+0xab0/0xab0 [ 1350.626989] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1350.627646] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1350.628301] ? is_vmalloc_addr+0x7b/0xb0 [ 1350.628896] netlink_unicast+0x54e/0x800 [ 1350.629488] ? netlink_attachskb+0x870/0x870 [ 1350.630126] netlink_sendmsg+0x90f/0xe00 [ 1350.630712] ? netlink_unicast+0x800/0x800 [ 1350.631327] ? netlink_unicast+0x800/0x800 [ 1350.631935] __sock_sendmsg+0x154/0x190 [ 1350.632512] ____sys_sendmsg+0x70d/0x870 [ 1350.633096] ? sock_write_iter+0x3d0/0x3d0 [ 1350.633698] ? do_recvmmsg+0x6d0/0x6d0 [ 1350.634259] ? lock_downgrade+0x6d0/0x6d0 [ 1350.634853] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1350.635608] ___sys_sendmsg+0xf3/0x170 [ 1350.636167] ? sendmsg_copy_msghdr+0x160/0x160 [ 1350.636829] ? __fget_files+0x2cf/0x520 [ 1350.637391] ? lock_downgrade+0x6d0/0x6d0 [ 1350.637981] ? find_held_lock+0x2c/0x110 [ 1350.638564] ? __fget_files+0x2f8/0x520 [ 1350.639132] ? __fget_light+0xea/0x290 [ 1350.639689] __sys_sendmsg+0xe5/0x1b0 [ 1350.640229] ? __sys_sendmsg_sock+0x40/0x40 [ 1350.640821] ? rcu_read_lock_any_held+0x75/0xa0 [ 1350.641461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1350.642175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1350.642875] do_syscall_64+0x33/0x40 [ 1350.643383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1350.644089] RIP: 0033:0x7fe269824b19 [ 1350.644608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.647112] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.648173] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1350.649151] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1350.650117] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.651098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.652081] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:49:44 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:49:44 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:44 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, 0x0) 20:49:44 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 9) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:44 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1364.843943] FAULT_INJECTION: forcing a failure. [ 1364.843943] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.845614] CPU: 1 PID: 8635 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1364.846570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.847734] Call Trace: [ 1364.848112] dump_stack+0x107/0x167 [ 1364.848630] should_fail.cold+0x5/0xa [ 1364.849175] ? create_object.isra.0+0x3a/0xa20 [ 1364.849189] should_failslab+0x5/0x20 [ 1364.849202] kmem_cache_alloc+0x5b/0x310 [ 1364.849215] ? mark_held_locks+0x9e/0xe0 [ 1364.849229] create_object.isra.0+0x3a/0xa20 [ 1364.849240] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1364.849256] kmem_cache_alloc_bulk+0x168/0x320 [ 1364.849273] io_submit_sqes+0x6fe6/0x8610 [ 1364.849304] ? __do_sys_io_uring_enter+0x6b2/0x1890 20:49:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1364.849315] __do_sys_io_uring_enter+0x6b2/0x1890 20:49:44 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, 0x0) [ 1364.849329] ? find_held_lock+0x2c/0x110 [ 1364.849345] ? io_submit_sqes+0x8610/0x8610 [ 1364.849361] ? __mutex_unlock_slowpath+0xe1/0x600 20:49:44 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1364.849375] ? wait_for_completion_io+0x270/0x270 [ 1364.849389] ? rcu_read_lock_any_held+0x75/0xa0 20:49:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:44 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 10) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1364.849400] ? vfs_write+0x354/0xb10 20:49:44 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 9) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1364.849412] ? fput_many+0x2f/0x1a0 [ 1364.849425] ? ksys_write+0x1a9/0x260 [ 1364.849437] ? __ia32_sys_read+0xb0/0xb0 [ 1364.849452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.849465] ? syscall_enter_from_user_mode+0x1d/0x50 20:49:44 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1364.849479] do_syscall_64+0x33/0x40 [ 1364.849491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.849499] RIP: 0033:0x7fa22a0e6b19 [ 1364.849510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.849517] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1364.849531] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1364.849537] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1364.849544] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.849550] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1364.849557] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1364.869321] FAULT_INJECTION: forcing a failure. [ 1364.869321] name failslab, interval 1, probability 0, space 0, times 0 20:49:44 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1364.869343] CPU: 0 PID: 8643 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1364.869353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.869360] Call Trace: [ 1364.869385] dump_stack+0x107/0x167 [ 1364.869407] should_fail.cold+0x5/0xa [ 1364.869438] ? create_object.isra.0+0x3a/0xa20 [ 1364.869466] should_failslab+0x5/0x20 [ 1364.869486] kmem_cache_alloc+0x5b/0x310 [ 1364.869512] create_object.isra.0+0x3a/0xa20 [ 1364.869529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1364.869555] kmem_cache_alloc_node+0x169/0x330 [ 1364.869582] __alloc_skb+0x6d/0x5b0 [ 1364.869607] netlink_dump+0x729/0x1070 [ 1364.869632] ? __netlink_kernel_create+0x860/0x860 [ 1364.869664] ? lock_downgrade+0x6d0/0x6d0 [ 1364.869690] __netlink_dump_start+0x62e/0x8e0 [ 1364.869716] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1364.869731] ? do_set_master+0x230/0x230 [ 1364.869752] ? rtnl_fdb_dump+0xa30/0xa30 [ 1364.869771] ? do_set_master+0x230/0x230 [ 1364.869793] ? lock_acquire+0x197/0x470 [ 1364.869810] ? netlink_deliver_tap+0xf4/0xcc0 [ 1364.869836] netlink_rcv_skb+0x14b/0x430 [ 1364.869855] ? rtnl_fdb_dump+0xa30/0xa30 [ 1364.869875] ? netlink_ack+0xab0/0xab0 [ 1364.869891] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1364.869916] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1364.869936] ? is_vmalloc_addr+0x7b/0xb0 [ 1364.869961] netlink_unicast+0x54e/0x800 [ 1364.869986] ? netlink_attachskb+0x870/0x870 [ 1364.870017] netlink_sendmsg+0x90f/0xe00 [ 1364.870043] ? netlink_unicast+0x800/0x800 [ 1364.870074] ? netlink_unicast+0x800/0x800 [ 1364.870095] __sock_sendmsg+0x154/0x190 [ 1364.870116] ____sys_sendmsg+0x70d/0x870 [ 1364.870139] ? sock_write_iter+0x3d0/0x3d0 [ 1364.870156] ? do_recvmmsg+0x6d0/0x6d0 [ 1364.870181] ? lock_downgrade+0x6d0/0x6d0 [ 1364.870204] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1364.870230] ___sys_sendmsg+0xf3/0x170 [ 1364.870253] ? sendmsg_copy_msghdr+0x160/0x160 [ 1364.870278] ? __fget_files+0x2cf/0x520 [ 1364.870297] ? lock_downgrade+0x6d0/0x6d0 [ 1364.870318] ? find_held_lock+0x2c/0x110 [ 1364.870348] ? __fget_files+0x2f8/0x520 [ 1364.870377] ? __fget_light+0xea/0x290 [ 1364.870405] __sys_sendmsg+0xe5/0x1b0 [ 1364.870426] ? __sys_sendmsg_sock+0x40/0x40 [ 1364.870445] ? rcu_read_lock_any_held+0x75/0xa0 [ 1364.870483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.870504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1364.870527] do_syscall_64+0x33/0x40 [ 1364.870546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.870559] RIP: 0033:0x7fe269824b19 [ 1364.870576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.870586] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1364.870607] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1364.870618] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1364.870629] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.870639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.870650] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 [ 1364.997796] FAULT_INJECTION: forcing a failure. [ 1364.997796] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.997809] CPU: 1 PID: 8657 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1364.997815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.997818] Call Trace: [ 1364.997833] dump_stack+0x107/0x167 [ 1364.997844] should_fail.cold+0x5/0xa [ 1364.997856] ? create_object.isra.0+0x3a/0xa20 [ 1364.997868] should_failslab+0x5/0x20 [ 1364.997878] kmem_cache_alloc+0x5b/0x310 [ 1364.997889] ? mark_held_locks+0x9e/0xe0 [ 1364.997901] create_object.isra.0+0x3a/0xa20 [ 1364.997909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1364.997922] kmem_cache_alloc_bulk+0x168/0x320 [ 1364.997936] io_submit_sqes+0x6fe6/0x8610 [ 1364.997960] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1364.997969] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1364.997981] ? find_held_lock+0x2c/0x110 [ 1364.997993] ? io_submit_sqes+0x8610/0x8610 [ 1364.998007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1364.998017] ? wait_for_completion_io+0x270/0x270 [ 1364.998030] ? rcu_read_lock_any_held+0x75/0xa0 [ 1364.998039] ? vfs_write+0x354/0xb10 [ 1364.998048] ? fput_many+0x2f/0x1a0 [ 1364.998058] ? ksys_write+0x1a9/0x260 [ 1364.998069] ? __ia32_sys_read+0xb0/0xb0 [ 1364.998081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.998091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1364.998103] do_syscall_64+0x33/0x40 [ 1364.998112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.998120] RIP: 0033:0x7fa22a0e6b19 [ 1364.998129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.998134] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1364.998146] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1364.998151] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1364.998157] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.998162] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1364.998167] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1365.044778] FAULT_INJECTION: forcing a failure. [ 1365.044778] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.044796] CPU: 1 PID: 8661 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1365.044802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1365.044805] Call Trace: [ 1365.044820] dump_stack+0x107/0x167 [ 1365.044831] should_fail.cold+0x5/0xa [ 1365.044846] should_failslab+0x5/0x20 [ 1365.044857] __kmalloc_node_track_caller+0x74/0x3b0 [ 1365.044867] ? netlink_dump+0x729/0x1070 [ 1365.044882] __alloc_skb+0xb1/0x5b0 [ 1365.044893] netlink_dump+0x729/0x1070 [ 1365.044906] ? __netlink_kernel_create+0x860/0x860 [ 1365.044923] ? lock_downgrade+0x6d0/0x6d0 [ 1365.044936] __netlink_dump_start+0x62e/0x8e0 [ 1365.044950] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1365.044957] ? do_set_master+0x230/0x230 [ 1365.044968] ? rtnl_fdb_dump+0xa30/0xa30 [ 1365.044977] ? do_set_master+0x230/0x230 [ 1365.044988] ? lock_acquire+0x197/0x470 [ 1365.044997] ? netlink_deliver_tap+0xf4/0xcc0 [ 1365.045010] netlink_rcv_skb+0x14b/0x430 [ 1365.045019] ? rtnl_fdb_dump+0xa30/0xa30 [ 1365.045030] ? netlink_ack+0xab0/0xab0 [ 1365.045038] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1365.045050] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1365.045061] ? is_vmalloc_addr+0x7b/0xb0 [ 1365.045073] netlink_unicast+0x54e/0x800 [ 1365.045085] ? netlink_attachskb+0x870/0x870 [ 1365.045101] netlink_sendmsg+0x90f/0xe00 [ 1365.045119] ? netlink_unicast+0x800/0x800 [ 1365.045135] ? netlink_unicast+0x800/0x800 [ 1365.045145] __sock_sendmsg+0x154/0x190 [ 1365.045156] ____sys_sendmsg+0x70d/0x870 [ 1365.045167] ? sock_write_iter+0x3d0/0x3d0 [ 1365.045176] ? do_recvmmsg+0x6d0/0x6d0 [ 1365.045188] ? lock_downgrade+0x6d0/0x6d0 [ 1365.045200] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1365.045213] ___sys_sendmsg+0xf3/0x170 [ 1365.045225] ? sendmsg_copy_msghdr+0x160/0x160 [ 1365.045237] ? __fget_files+0x2cf/0x520 [ 1365.045247] ? lock_downgrade+0x6d0/0x6d0 [ 1365.045257] ? find_held_lock+0x2c/0x110 [ 1365.045273] ? __fget_files+0x2f8/0x520 [ 1365.045287] ? __fget_light+0xea/0x290 [ 1365.045301] __sys_sendmsg+0xe5/0x1b0 [ 1365.045312] ? __sys_sendmsg_sock+0x40/0x40 [ 1365.045321] ? rcu_read_lock_any_held+0x75/0xa0 [ 1365.045341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1365.045352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1365.045363] do_syscall_64+0x33/0x40 [ 1365.045373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1365.045380] RIP: 0033:0x7fe269824b19 [ 1365.045389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1365.045394] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1365.045405] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1365.045411] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1365.045416] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.045421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.045427] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:49:57 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(0x0) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:57 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, 0x0) 20:49:57 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:57 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:57 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 11) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c9", 0x47}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:57 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1378.602227] FAULT_INJECTION: forcing a failure. [ 1378.602227] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.605075] CPU: 1 PID: 8691 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1378.606650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.608538] Call Trace: [ 1378.609151] dump_stack+0x107/0x167 [ 1378.609987] should_fail.cold+0x5/0xa [ 1378.610857] ? create_object.isra.0+0x3a/0xa20 [ 1378.611893] should_failslab+0x5/0x20 [ 1378.612758] kmem_cache_alloc+0x5b/0x310 [ 1378.613681] create_object.isra.0+0x3a/0xa20 [ 1378.614670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1378.615828] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1378.616984] ? netlink_dump+0x729/0x1070 [ 1378.617915] __alloc_skb+0xb1/0x5b0 [ 1378.618743] netlink_dump+0x729/0x1070 [ 1378.619629] ? __netlink_kernel_create+0x860/0x860 [ 1378.620758] ? lock_downgrade+0x6d0/0x6d0 [ 1378.621700] __netlink_dump_start+0x62e/0x8e0 [ 1378.622721] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1378.623668] ? do_set_master+0x230/0x230 [ 1378.624585] ? rtnl_fdb_dump+0xa30/0xa30 [ 1378.625509] ? do_set_master+0x230/0x230 [ 1378.626429] ? lock_acquire+0x197/0x470 [ 1378.627329] ? netlink_deliver_tap+0xf4/0xcc0 [ 1378.628352] netlink_rcv_skb+0x14b/0x430 [ 1378.629276] ? rtnl_fdb_dump+0xa30/0xa30 [ 1378.630191] ? netlink_ack+0xab0/0xab0 [ 1378.631068] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1378.632102] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1378.633144] ? is_vmalloc_addr+0x7b/0xb0 [ 1378.634072] netlink_unicast+0x54e/0x800 [ 1378.634999] ? netlink_attachskb+0x870/0x870 [ 1378.636002] netlink_sendmsg+0x90f/0xe00 [ 1378.636932] ? netlink_unicast+0x800/0x800 [ 1378.637901] ? netlink_unicast+0x800/0x800 [ 1378.638856] __sock_sendmsg+0x154/0x190 [ 1378.639758] ____sys_sendmsg+0x70d/0x870 [ 1378.640694] ? sock_write_iter+0x3d0/0x3d0 [ 1378.641648] ? do_recvmmsg+0x6d0/0x6d0 [ 1378.642535] ? lock_downgrade+0x6d0/0x6d0 [ 1378.643476] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1378.644670] ___sys_sendmsg+0xf3/0x170 [ 1378.645563] ? sendmsg_copy_msghdr+0x160/0x160 [ 1378.646598] ? __fget_files+0x2cf/0x520 [ 1378.647500] ? lock_downgrade+0x6d0/0x6d0 [ 1378.648432] ? find_held_lock+0x2c/0x110 [ 1378.649366] ? __fget_files+0x2f8/0x520 [ 1378.650273] ? __fget_light+0xea/0x290 [ 1378.651154] __sys_sendmsg+0xe5/0x1b0 [ 1378.652007] ? __sys_sendmsg_sock+0x40/0x40 [ 1378.652989] ? rcu_read_lock_any_held+0x75/0xa0 [ 1378.654061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.655241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.656402] do_syscall_64+0x33/0x40 [ 1378.657249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.658392] RIP: 0033:0x7fe269824b19 [ 1378.659225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.663379] RSP: 002b:00007fe266d9a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.665095] RAX: ffffffffffffffda RBX: 00007fe269937f60 RCX: 00007fe269824b19 [ 1378.666710] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1378.668326] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.669941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1378.671542] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 [ 1378.687353] FAULT_INJECTION: forcing a failure. [ 1378.687353] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.690285] CPU: 0 PID: 8688 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1378.691954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.693979] Call Trace: [ 1378.694636] dump_stack+0x107/0x167 [ 1378.695520] should_fail.cold+0x5/0xa [ 1378.696459] should_failslab+0x5/0x20 [ 1378.697407] kmem_cache_alloc_bulk+0x4b/0x320 [ 1378.698499] io_submit_sqes+0x6fe6/0x8610 [ 1378.699545] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1378.700788] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1378.702157] ? find_held_lock+0x2c/0x110 [ 1378.703135] ? io_submit_sqes+0x8610/0x8610 [ 1378.704176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1378.705365] ? wait_for_completion_io+0x270/0x270 [ 1378.706550] ? rcu_read_lock_any_held+0x75/0xa0 [ 1378.707690] ? vfs_write+0x354/0xb10 [ 1378.708591] ? fput_many+0x2f/0x1a0 [ 1378.709480] ? ksys_write+0x1a9/0x260 [ 1378.710391] ? __ia32_sys_read+0xb0/0xb0 [ 1378.711390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.712653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.713923] do_syscall_64+0x33/0x40 [ 1378.714813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.716060] RIP: 0033:0x7fa22a0e6b19 [ 1378.716985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.721447] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1378.723296] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1378.725030] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1378.726759] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.728506] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1378.730223] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:49:58 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c9", 0x47}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:49:58 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(0x0) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:49:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:49:58 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:49:58 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 12) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:49:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(0x0) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1379.038013] FAULT_INJECTION: forcing a failure. [ 1379.038013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.041125] CPU: 1 PID: 8716 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 1379.042673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1379.044564] Call Trace: [ 1379.045172] dump_stack+0x107/0x167 [ 1379.046001] should_fail.cold+0x5/0xa [ 1379.046885] _copy_to_user+0x2e/0x180 [ 1379.047764] simple_read_from_buffer+0xcc/0x160 [ 1379.048831] proc_fail_nth_read+0x198/0x230 [ 1379.049816] ? proc_sessionid_read+0x230/0x230 [ 1379.050844] ? security_file_permission+0xb1/0xe0 [ 1379.051957] ? proc_sessionid_read+0x230/0x230 [ 1379.052996] vfs_read+0x228/0x620 [ 1379.053790] ksys_read+0x12d/0x260 [ 1379.054592] ? vfs_write+0xb10/0xb10 [ 1379.055444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1379.056627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1379.057799] do_syscall_64+0x33/0x40 [ 1379.058643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1379.059799] RIP: 0033:0x7fe2697d769c [ 1379.060642] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1379.064842] RSP: 002b:00007fe266d9a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1379.066586] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007fe2697d769c [ 1379.068217] RDX: 000000000000000f RSI: 00007fe266d9a1e0 RDI: 0000000000000005 [ 1379.069843] RBP: 00007fe266d9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.071455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1379.073085] R13: 00007ffe38ab9e6f R14: 00007fe266d9a300 R15: 0000000000022000 20:50:11 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) 20:50:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:11 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c9", 0x47}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:50:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:50:11 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 11) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:11 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:11 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:50:11 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1392.301755] FAULT_INJECTION: forcing a failure. [ 1392.301755] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.304758] CPU: 0 PID: 8736 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1392.306343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.308209] Call Trace: [ 1392.308804] dump_stack+0x107/0x167 [ 1392.309645] should_fail.cold+0x5/0xa [ 1392.310504] ? create_object.isra.0+0x3a/0xa20 [ 1392.311532] should_failslab+0x5/0x20 [ 1392.312388] kmem_cache_alloc+0x5b/0x310 [ 1392.313320] create_object.isra.0+0x3a/0xa20 20:50:11 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fb", 0x6a}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1392.314312] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1392.315634] kmem_cache_alloc_bulk+0x168/0x320 [ 1392.316681] io_submit_sqes+0x6fe6/0x8610 [ 1392.317661] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.318786] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.319897] ? find_held_lock+0x2c/0x110 [ 1392.320826] ? io_submit_sqes+0x8610/0x8610 [ 1392.321825] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1392.322923] ? wait_for_completion_io+0x270/0x270 [ 1392.324015] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.325078] ? vfs_write+0x354/0xb10 [ 1392.325922] ? fput_many+0x2f/0x1a0 [ 1392.326743] ? ksys_write+0x1a9/0x260 [ 1392.327616] ? __ia32_sys_read+0xb0/0xb0 [ 1392.328547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.329748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.330925] do_syscall_64+0x33/0x40 [ 1392.331774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.332943] RIP: 0033:0x7fa22a0e6b19 [ 1392.333782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.337932] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1392.339663] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1392.341283] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1392.342884] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.344488] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1392.346093] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:50:11 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 1) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:11 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1392.392177] FAULT_INJECTION: forcing a failure. [ 1392.392177] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:50:11 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1392.395063] CPU: 0 PID: 8746 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1392.396743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.398629] Call Trace: [ 1392.399222] dump_stack+0x107/0x167 [ 1392.400045] should_fail.cold+0x5/0xa [ 1392.400925] _copy_from_user+0x2e/0x1b0 [ 1392.401819] __copy_msghdr_from_user+0x91/0x4b0 [ 1392.402878] ? __ia32_sys_shutdown+0x80/0x80 [ 1392.403859] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1392.405052] ? __lock_acquire+0x1657/0x5b00 [ 1392.406034] ? __lock_acquire+0xbb1/0x5b00 [ 1392.407001] sendmsg_copy_msghdr+0xa1/0x160 [ 1392.407982] ? do_recvmmsg+0x6d0/0x6d0 [ 1392.408872] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1392.410055] ? lock_downgrade+0x6d0/0x6d0 [ 1392.410991] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1392.412178] ___sys_sendmsg+0xc6/0x170 [ 1392.413069] ? sendmsg_copy_msghdr+0x160/0x160 [ 1392.414114] ? __fget_files+0x2cf/0x520 [ 1392.415019] ? lock_downgrade+0x6d0/0x6d0 [ 1392.415955] ? find_held_lock+0x2c/0x110 [ 1392.416885] ? __fget_files+0x2f8/0x520 [ 1392.417793] ? __fget_light+0xea/0x290 [ 1392.418683] __sys_sendmsg+0xe5/0x1b0 [ 1392.419547] ? __sys_sendmsg_sock+0x40/0x40 [ 1392.420519] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.421585] ? fput_many+0x2f/0x1a0 20:50:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1392.422403] ? ksys_write+0x1a9/0x260 [ 1392.423351] ? __ia32_sys_read+0xb0/0xb0 [ 1392.424247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.425447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.426616] do_syscall_64+0x33/0x40 [ 1392.427462] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.428628] RIP: 0033:0x7fb36483cb19 [ 1392.429478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.433662] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1392.435388] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1392.437004] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1392.438633] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.440250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.441869] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:50:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:11 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:50:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:11 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:11 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 12) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r4 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1392.621022] FAULT_INJECTION: forcing a failure. [ 1392.621022] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.622497] CPU: 1 PID: 8774 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1392.623309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.624276] Call Trace: [ 1392.624592] dump_stack+0x107/0x167 [ 1392.625028] should_fail.cold+0x5/0xa [ 1392.625480] ? create_object.isra.0+0x3a/0xa20 [ 1392.626021] should_failslab+0x5/0x20 [ 1392.626465] kmem_cache_alloc+0x5b/0x310 [ 1392.626952] ? mark_held_locks+0x9e/0xe0 [ 1392.627438] create_object.isra.0+0x3a/0xa20 [ 1392.627953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1392.628540] kmem_cache_alloc_bulk+0x168/0x320 [ 1392.629073] io_submit_sqes+0x6fe6/0x8610 [ 1392.629565] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.630142] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1392.630695] ? find_held_lock+0x2c/0x110 [ 1392.631160] ? io_submit_sqes+0x8610/0x8610 [ 1392.631658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1392.632208] ? wait_for_completion_io+0x270/0x270 [ 1392.632759] ? rcu_read_lock_any_held+0x75/0xa0 [ 1392.633298] ? vfs_write+0x354/0xb10 [ 1392.633723] ? fput_many+0x2f/0x1a0 [ 1392.634144] ? ksys_write+0x1a9/0x260 [ 1392.634580] ? __ia32_sys_read+0xb0/0xb0 [ 1392.635051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1392.635646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1392.636236] do_syscall_64+0x33/0x40 [ 1392.636663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1392.637255] RIP: 0033:0x7fa22a0e6b19 [ 1392.637680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.639783] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1392.640665] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1392.641491] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1392.642311] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.643126] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1392.643948] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:50:25 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 2) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:50:25 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:50:25 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fb", 0x6a}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:50:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1406.156606] FAULT_INJECTION: forcing a failure. [ 1406.156606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.158581] CPU: 1 PID: 8788 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1406.159635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.160934] Call Trace: [ 1406.161366] dump_stack+0x107/0x167 [ 1406.161940] should_fail.cold+0x5/0xa [ 1406.162543] _copy_from_user+0x2e/0x1b0 [ 1406.163169] iovec_from_user+0x141/0x400 [ 1406.163808] __import_iovec+0x67/0x590 [ 1406.164422] ? __ia32_sys_shutdown+0x80/0x80 [ 1406.165124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1406.165953] import_iovec+0x83/0xb0 [ 1406.166534] sendmsg_copy_msghdr+0x131/0x160 [ 1406.167221] ? do_recvmmsg+0x6d0/0x6d0 [ 1406.167831] ? lock_downgrade+0x6d0/0x6d0 [ 1406.168488] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1406.169332] ___sys_sendmsg+0xc6/0x170 [ 1406.169945] ? sendmsg_copy_msghdr+0x160/0x160 [ 1406.170664] ? __fget_files+0x2cf/0x520 [ 1406.171284] ? lock_downgrade+0x6d0/0x6d0 [ 1406.171931] ? find_held_lock+0x2c/0x110 [ 1406.172578] ? __fget_files+0x2f8/0x520 [ 1406.173223] ? __fget_light+0xea/0x290 [ 1406.173832] __sys_sendmsg+0xe5/0x1b0 [ 1406.174424] ? __sys_sendmsg_sock+0x40/0x40 [ 1406.175093] ? rcu_read_lock_any_held+0x75/0xa0 [ 1406.175830] ? fput_many+0x2f/0x1a0 [ 1406.176398] ? ksys_write+0x1a9/0x260 [ 1406.176997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.177823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.178636] do_syscall_64+0x33/0x40 [ 1406.179227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.180025] RIP: 0033:0x7fb36483cb19 [ 1406.180606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.183488] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1406.184661] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1406.185776] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1406.186882] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.187995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.189249] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:50:25 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:25 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 13) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1406.241025] FAULT_INJECTION: forcing a failure. [ 1406.241025] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.243985] CPU: 1 PID: 8798 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1406.245593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1406.247571] Call Trace: [ 1406.248274] dump_stack+0x107/0x167 [ 1406.249248] should_fail.cold+0x5/0xa [ 1406.250257] ? create_object.isra.0+0x3a/0xa20 [ 1406.251317] should_failslab+0x5/0x20 [ 1406.252131] kmem_cache_alloc+0x5b/0x310 [ 1406.252981] ? mark_held_locks+0x9e/0xe0 [ 1406.253841] create_object.isra.0+0x3a/0xa20 [ 1406.254775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1406.255946] kmem_cache_alloc_bulk+0x168/0x320 [ 1406.256904] io_submit_sqes+0x6fe6/0x8610 [ 1406.257818] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1406.258875] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1406.259902] ? find_held_lock+0x2c/0x110 [ 1406.260803] ? io_submit_sqes+0x8610/0x8610 [ 1406.261749] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1406.262788] ? wait_for_completion_io+0x270/0x270 [ 1406.263787] ? rcu_read_lock_any_held+0x75/0xa0 [ 1406.264763] ? vfs_write+0x354/0xb10 [ 1406.265811] ? fput_many+0x2f/0x1a0 [ 1406.266740] ? ksys_write+0x1a9/0x260 [ 1406.267705] ? __ia32_sys_read+0xb0/0xb0 [ 1406.268739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1406.270092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1406.271272] do_syscall_64+0x33/0x40 [ 1406.272111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1406.273279] RIP: 0033:0x7fa22a0e6b19 [ 1406.274113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1406.278257] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1406.279990] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1406.281603] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1406.283203] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.284810] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1406.286419] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:50:40 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:40 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:40 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 14) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:50:40 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:50:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fb", 0x6a}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1421.474517] FAULT_INJECTION: forcing a failure. [ 1421.474517] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.476170] CPU: 1 PID: 8815 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1421.476956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.477918] Call Trace: [ 1421.478227] dump_stack+0x107/0x167 [ 1421.478646] should_fail.cold+0x5/0xa [ 1421.479087] ? __alloc_skb+0x6d/0x5b0 [ 1421.479532] should_failslab+0x5/0x20 [ 1421.479975] kmem_cache_alloc_node+0x55/0x330 [ 1421.480497] __alloc_skb+0x6d/0x5b0 [ 1421.480919] netlink_sendmsg+0x998/0xe00 [ 1421.481399] ? netlink_unicast+0x800/0x800 [ 1421.481887] ? netlink_unicast+0x800/0x800 [ 1421.482374] __sock_sendmsg+0x154/0x190 [ 1421.482834] ____sys_sendmsg+0x70d/0x870 [ 1421.483303] ? sock_write_iter+0x3d0/0x3d0 [ 1421.483790] ? do_recvmmsg+0x6d0/0x6d0 [ 1421.484245] ? lock_downgrade+0x6d0/0x6d0 [ 1421.484725] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.485326] ___sys_sendmsg+0xf3/0x170 [ 1421.485777] ? sendmsg_copy_msghdr+0x160/0x160 [ 1421.486317] ? __fget_files+0x2cf/0x520 [ 1421.486775] ? lock_downgrade+0x6d0/0x6d0 [ 1421.487260] ? find_held_lock+0x2c/0x110 [ 1421.487734] ? __fget_files+0x2f8/0x520 [ 1421.488204] ? __fget_light+0xea/0x290 [ 1421.488661] __sys_sendmsg+0xe5/0x1b0 [ 1421.489103] ? __sys_sendmsg_sock+0x40/0x40 [ 1421.489606] ? rcu_read_lock_any_held+0x75/0xa0 [ 1421.490154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.490766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.491363] do_syscall_64+0x33/0x40 [ 1421.491797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.492395] RIP: 0033:0x7fb36483cb19 [ 1421.492820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.494959] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1421.495850] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1421.496676] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1421.497508] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.498338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.499168] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:50:40 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 3) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1421.516236] FAULT_INJECTION: forcing a failure. [ 1421.516236] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.517697] CPU: 1 PID: 8816 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1421.518505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.519478] Call Trace: [ 1421.519804] dump_stack+0x107/0x167 [ 1421.520245] should_fail.cold+0x5/0xa [ 1421.520703] ? create_object.isra.0+0x3a/0xa20 [ 1421.521253] should_failslab+0x5/0x20 [ 1421.521712] kmem_cache_alloc+0x5b/0x310 [ 1421.522207] ? mark_held_locks+0x9e/0xe0 [ 1421.522695] create_object.isra.0+0x3a/0xa20 [ 1421.523221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.523814] kmem_cache_alloc_bulk+0x168/0x320 [ 1421.524342] io_submit_sqes+0x6fe6/0x8610 [ 1421.524839] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1421.525425] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1421.525986] ? find_held_lock+0x2c/0x110 [ 1421.526458] ? io_submit_sqes+0x8610/0x8610 [ 1421.526966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1421.527523] ? wait_for_completion_io+0x270/0x270 [ 1421.528081] ? rcu_read_lock_any_held+0x75/0xa0 [ 1421.528614] ? vfs_write+0x354/0xb10 [ 1421.529048] ? fput_many+0x2f/0x1a0 [ 1421.529475] ? ksys_write+0x1a9/0x260 [ 1421.529915] ? __ia32_sys_read+0xb0/0xb0 [ 1421.530378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.530986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.531578] do_syscall_64+0x33/0x40 [ 1421.532007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.532604] RIP: 0033:0x7fa22a0e6b19 [ 1421.533038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.535148] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1421.536035] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1421.536855] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1421.537690] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.538519] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1421.539353] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:50:40 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e8"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:50:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec", 0x7c}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:50:41 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:50:41 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 4) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e8"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:41 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 15) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1421.653166] FAULT_INJECTION: forcing a failure. [ 1421.653166] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.654682] CPU: 1 PID: 8844 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1421.655470] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.656431] Call Trace: [ 1421.656742] dump_stack+0x107/0x167 [ 1421.657160] should_fail.cold+0x5/0xa [ 1421.657610] ? create_object.isra.0+0x3a/0xa20 [ 1421.658145] should_failslab+0x5/0x20 [ 1421.658605] kmem_cache_alloc+0x5b/0x310 [ 1421.659076] create_object.isra.0+0x3a/0xa20 [ 1421.659582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.660172] kmem_cache_alloc_node+0x169/0x330 [ 1421.660706] __alloc_skb+0x6d/0x5b0 [ 1421.661132] netlink_sendmsg+0x998/0xe00 [ 1421.661607] ? netlink_unicast+0x800/0x800 [ 1421.662104] ? netlink_unicast+0x800/0x800 [ 1421.662598] __sock_sendmsg+0x154/0x190 [ 1421.663054] ____sys_sendmsg+0x70d/0x870 [ 1421.663529] ? sock_write_iter+0x3d0/0x3d0 [ 1421.664012] ? do_recvmmsg+0x6d0/0x6d0 [ 1421.664473] ? lock_downgrade+0x6d0/0x6d0 [ 1421.664952] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1421.665567] ___sys_sendmsg+0xf3/0x170 [ 1421.666014] ? sendmsg_copy_msghdr+0x160/0x160 [ 1421.666545] ? __fget_files+0x2cf/0x520 [ 1421.666996] ? lock_downgrade+0x6d0/0x6d0 [ 1421.667476] ? find_held_lock+0x2c/0x110 [ 1421.667950] ? __fget_files+0x2f8/0x520 [ 1421.668412] ? __fget_light+0xea/0x290 [ 1421.668866] __sys_sendmsg+0xe5/0x1b0 [ 1421.669311] ? __sys_sendmsg_sock+0x40/0x40 [ 1421.669808] ? rcu_read_lock_any_held+0x75/0xa0 [ 1421.670362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.670970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.671574] do_syscall_64+0x33/0x40 [ 1421.672006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.672598] RIP: 0033:0x7fb36483cb19 [ 1421.673026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.675167] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1421.676043] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1421.676871] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1421.677706] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.678529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.679352] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 [ 1421.698816] FAULT_INJECTION: forcing a failure. [ 1421.698816] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.700574] CPU: 0 PID: 8848 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1421.701496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.702593] Call Trace: [ 1421.702960] dump_stack+0x107/0x167 [ 1421.703461] should_fail.cold+0x5/0xa [ 1421.703984] ? create_object.isra.0+0x3a/0xa20 [ 1421.704610] should_failslab+0x5/0x20 [ 1421.705127] kmem_cache_alloc+0x5b/0x310 [ 1421.705682] ? mark_held_locks+0x9e/0xe0 [ 1421.706236] create_object.isra.0+0x3a/0xa20 [ 1421.706835] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.707507] kmem_cache_alloc_bulk+0x168/0x320 [ 1421.708120] io_submit_sqes+0x6fe6/0x8610 [ 1421.708682] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1421.709344] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1421.709982] ? find_held_lock+0x2c/0x110 [ 1421.710519] ? io_submit_sqes+0x8610/0x8610 [ 1421.711092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1421.711732] ? wait_for_completion_io+0x270/0x270 [ 1421.712368] ? rcu_read_lock_any_held+0x75/0xa0 [ 1421.712973] ? vfs_write+0x354/0xb10 [ 1421.713470] ? fput_many+0x2f/0x1a0 [ 1421.713948] ? ksys_write+0x1a9/0x260 [ 1421.714457] ? __ia32_sys_read+0xb0/0xb0 [ 1421.715019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.715705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.716371] do_syscall_64+0x33/0x40 [ 1421.716856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1421.717536] RIP: 0033:0x7fa22a0e6b19 [ 1421.718025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.720396] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1421.721407] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1421.722329] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1421.723266] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.724189] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1421.725118] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:50:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e8"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:55 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 16) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:55 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec", 0x7c}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:50:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 5) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:50:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, 0x0) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:50:55 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1436.262042] FAULT_INJECTION: forcing a failure. [ 1436.262042] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.265829] CPU: 1 PID: 8865 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1436.267558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.269655] Call Trace: [ 1436.270307] dump_stack+0x107/0x167 [ 1436.271227] should_fail.cold+0x5/0xa [ 1436.272185] should_failslab+0x5/0x20 [ 1436.273152] __kmalloc_node_track_caller+0x74/0x3b0 [ 1436.273173] ? netlink_sendmsg+0x998/0xe00 [ 1436.273202] __alloc_skb+0xb1/0x5b0 [ 1436.273228] netlink_sendmsg+0x998/0xe00 [ 1436.273256] ? netlink_unicast+0x800/0x800 [ 1436.273289] ? netlink_unicast+0x800/0x800 [ 1436.273311] __sock_sendmsg+0x154/0x190 [ 1436.273334] ____sys_sendmsg+0x70d/0x870 [ 1436.273359] ? sock_write_iter+0x3d0/0x3d0 [ 1436.273378] ? do_recvmmsg+0x6d0/0x6d0 [ 1436.273406] ? lock_downgrade+0x6d0/0x6d0 [ 1436.273442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1436.273470] ___sys_sendmsg+0xf3/0x170 20:50:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f3"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1436.273495] ? sendmsg_copy_msghdr+0x160/0x160 [ 1436.273521] ? __fget_files+0x2cf/0x520 [ 1436.273542] ? lock_downgrade+0x6d0/0x6d0 20:50:55 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec", 0x7c}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1436.273565] ? find_held_lock+0x2c/0x110 20:50:55 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 17) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1436.273597] ? __fget_files+0x2f8/0x520 20:50:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 6) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1436.273627] ? __fget_light+0xea/0x290 [ 1436.273658] __sys_sendmsg+0xe5/0x1b0 [ 1436.273680] ? __sys_sendmsg_sock+0x40/0x40 [ 1436.273700] ? rcu_read_lock_any_held+0x75/0xa0 [ 1436.273741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 20:50:55 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:50:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1436.273763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1436.273788] do_syscall_64+0x33/0x40 [ 1436.273809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1436.273823] RIP: 0033:0x7fb36483cb19 [ 1436.273842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:50:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, 0x0) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:50:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f3"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1436.273853] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.273876] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1436.273888] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1436.273899] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1436.273910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.273922] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 [ 1436.291889] FAULT_INJECTION: forcing a failure. [ 1436.291889] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.291934] CPU: 0 PID: 8862 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1436.291944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.291950] Call Trace: [ 1436.291976] dump_stack+0x107/0x167 [ 1436.291999] should_fail.cold+0x5/0xa [ 1436.292022] ? create_object.isra.0+0x3a/0xa20 [ 1436.292046] should_failslab+0x5/0x20 [ 1436.292065] kmem_cache_alloc+0x5b/0x310 [ 1436.292086] ? mark_held_locks+0x9e/0xe0 [ 1436.292110] create_object.isra.0+0x3a/0xa20 [ 1436.292127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1436.292153] kmem_cache_alloc_bulk+0x168/0x320 [ 1436.292181] io_submit_sqes+0x6fe6/0x8610 [ 1436.292230] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1436.292249] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1436.292273] ? find_held_lock+0x2c/0x110 [ 1436.292298] ? io_submit_sqes+0x8610/0x8610 [ 1436.292326] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1436.292348] ? wait_for_completion_io+0x270/0x270 [ 1436.292370] ? rcu_read_lock_any_held+0x75/0xa0 [ 1436.292388] ? vfs_write+0x354/0xb10 [ 1436.292407] ? fput_many+0x2f/0x1a0 [ 1436.292433] ? ksys_write+0x1a9/0x260 [ 1436.292453] ? __ia32_sys_read+0xb0/0xb0 [ 1436.292477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1436.292496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1436.292519] do_syscall_64+0x33/0x40 [ 1436.292537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1436.292550] RIP: 0033:0x7fa22a0e6b19 [ 1436.292567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1436.292577] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1436.292598] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1436.292609] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1436.292619] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1436.292629] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1436.292640] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1436.486048] FAULT_INJECTION: forcing a failure. [ 1436.486048] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.486071] CPU: 0 PID: 8890 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1436.486080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.486086] Call Trace: [ 1436.486110] dump_stack+0x107/0x167 [ 1436.486130] should_fail.cold+0x5/0xa [ 1436.486150] ? create_object.isra.0+0x3a/0xa20 [ 1436.486170] should_failslab+0x5/0x20 [ 1436.486188] kmem_cache_alloc+0x5b/0x310 [ 1436.486210] create_object.isra.0+0x3a/0xa20 [ 1436.486225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1436.486249] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1436.486266] ? netlink_sendmsg+0x998/0xe00 [ 1436.486298] __alloc_skb+0xb1/0x5b0 [ 1436.486320] netlink_sendmsg+0x998/0xe00 [ 1436.486343] ? netlink_unicast+0x800/0x800 [ 1436.486371] ? netlink_unicast+0x800/0x800 [ 1436.486389] __sock_sendmsg+0x154/0x190 [ 1436.486408] ____sys_sendmsg+0x70d/0x870 [ 1436.486429] ? sock_write_iter+0x3d0/0x3d0 [ 1436.486445] ? do_recvmmsg+0x6d0/0x6d0 [ 1436.486468] ? lock_downgrade+0x6d0/0x6d0 [ 1436.486489] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1436.486513] ___sys_sendmsg+0xf3/0x170 [ 1436.486534] ? sendmsg_copy_msghdr+0x160/0x160 [ 1436.486556] ? __fget_files+0x2cf/0x520 [ 1436.486574] ? lock_downgrade+0x6d0/0x6d0 [ 1436.486592] ? find_held_lock+0x2c/0x110 [ 1436.486619] ? __fget_files+0x2f8/0x520 [ 1436.486644] ? __fget_light+0xea/0x290 [ 1436.486670] __sys_sendmsg+0xe5/0x1b0 [ 1436.486689] ? __sys_sendmsg_sock+0x40/0x40 [ 1436.486705] ? rcu_read_lock_any_held+0x75/0xa0 [ 1436.486739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1436.486759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1436.486779] do_syscall_64+0x33/0x40 [ 1436.486797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1436.486808] RIP: 0033:0x7fb36483cb19 [ 1436.486825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1436.486834] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.486854] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1436.486863] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1436.486873] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1436.486882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.486892] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 [ 1436.493328] FAULT_INJECTION: forcing a failure. [ 1436.493328] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.493350] CPU: 1 PID: 8889 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1436.493359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1436.493365] Call Trace: [ 1436.493390] dump_stack+0x107/0x167 [ 1436.493411] should_fail.cold+0x5/0xa [ 1436.493452] ? create_object.isra.0+0x3a/0xa20 [ 1436.493474] should_failslab+0x5/0x20 [ 1436.493492] kmem_cache_alloc+0x5b/0x310 [ 1436.493512] ? mark_held_locks+0x9e/0xe0 [ 1436.493533] create_object.isra.0+0x3a/0xa20 [ 1436.493548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1436.493573] kmem_cache_alloc_bulk+0x168/0x320 [ 1436.493598] io_submit_sqes+0x6fe6/0x8610 [ 1436.493644] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1436.493661] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1436.493682] ? find_held_lock+0x2c/0x110 [ 1436.493705] ? io_submit_sqes+0x8610/0x8610 [ 1436.493729] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1436.493749] ? wait_for_completion_io+0x270/0x270 [ 1436.493771] ? rcu_read_lock_any_held+0x75/0xa0 [ 1436.493787] ? vfs_write+0x354/0xb10 [ 1436.493805] ? fput_many+0x2f/0x1a0 [ 1436.493824] ? ksys_write+0x1a9/0x260 [ 1436.493843] ? __ia32_sys_read+0xb0/0xb0 [ 1436.493865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1436.493884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1436.493905] do_syscall_64+0x33/0x40 [ 1436.493923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1436.493935] RIP: 0033:0x7fa22a0e6b19 [ 1436.493951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1436.493960] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1436.493980] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1436.493990] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1436.494000] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1436.494009] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1436.494020] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:51:10 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:51:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 7) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:10 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, 0x0) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:10 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3", 0x85}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:10 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f3"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1451.415783] FAULT_INJECTION: forcing a failure. [ 1451.415783] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.418488] CPU: 0 PID: 8918 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1451.419931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1451.421687] Call Trace: [ 1451.422254] dump_stack+0x107/0x167 [ 1451.423029] should_fail.cold+0x5/0xa [ 1451.423839] ? create_object.isra.0+0x3a/0xa20 [ 1451.424816] should_failslab+0x5/0x20 [ 1451.425621] kmem_cache_alloc+0x5b/0x310 [ 1451.426484] ? mark_held_locks+0x9e/0xe0 [ 1451.427340] create_object.isra.0+0x3a/0xa20 [ 1451.428271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1451.429338] kmem_cache_alloc_bulk+0x168/0x320 [ 1451.430322] io_submit_sqes+0x6fe6/0x8610 [ 1451.431229] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1451.432278] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1451.433301] ? find_held_lock+0x2c/0x110 [ 1451.434174] ? io_submit_sqes+0x8610/0x8610 [ 1451.435085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1451.436103] ? wait_for_completion_io+0x270/0x270 [ 1451.437129] ? rcu_read_lock_any_held+0x75/0xa0 [ 1451.438121] ? vfs_write+0x354/0xb10 [ 1451.438908] ? fput_many+0x2f/0x1a0 [ 1451.439678] ? ksys_write+0x1a9/0x260 [ 1451.440486] ? __ia32_sys_read+0xb0/0xb0 [ 1451.441348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1451.442454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1451.443552] do_syscall_64+0x33/0x40 [ 1451.444332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1451.445405] RIP: 0033:0x7fa22a0e6b19 [ 1451.446200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.450090] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1451.451697] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1451.453191] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1451.454706] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1451.456202] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1451.457711] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1451.476708] FAULT_INJECTION: forcing a failure. [ 1451.476708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.479402] CPU: 1 PID: 8922 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1451.480810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1451.482530] Call Trace: [ 1451.483072] dump_stack+0x107/0x167 [ 1451.483818] should_fail.cold+0x5/0xa [ 1451.484604] _copy_from_iter_full+0x201/0xa60 [ 1451.485520] ? __virt_addr_valid+0x170/0x5d0 [ 1451.486434] ? __check_object_size+0x319/0x440 [ 1451.487387] netlink_sendmsg+0x879/0xe00 [ 1451.488230] ? netlink_unicast+0x800/0x800 [ 1451.489098] ? netlink_unicast+0x800/0x800 [ 1451.489969] __sock_sendmsg+0x154/0x190 [ 1451.490794] ____sys_sendmsg+0x70d/0x870 [ 1451.491674] ? sock_write_iter+0x3d0/0x3d0 [ 1451.492623] ? do_recvmmsg+0x6d0/0x6d0 [ 1451.493485] ? lock_downgrade+0x6d0/0x6d0 [ 1451.494426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1451.495638] ___sys_sendmsg+0xf3/0x170 [ 1451.496448] ? sendmsg_copy_msghdr+0x160/0x160 [ 1451.497391] ? __fget_files+0x2cf/0x520 [ 1451.498207] ? lock_downgrade+0x6d0/0x6d0 [ 1451.499056] ? find_held_lock+0x2c/0x110 [ 1451.499896] ? __fget_files+0x2f8/0x520 [ 1451.500708] ? __fget_light+0xea/0x290 [ 1451.501502] __sys_sendmsg+0xe5/0x1b0 [ 1451.502286] ? __sys_sendmsg_sock+0x40/0x40 [ 1451.503168] ? rcu_read_lock_any_held+0x75/0xa0 [ 1451.504120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1451.505182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1451.506239] do_syscall_64+0x33/0x40 [ 1451.507013] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1451.508045] RIP: 0033:0x7fb36483cb19 [ 1451.508812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.512575] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.514126] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1451.515586] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1451.517035] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1451.518507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.519978] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:51:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3", 0x85}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:10 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:10 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:51:10 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x1c9, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:11 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3", 0x85}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:11 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 19) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:11 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1451.744349] FAULT_INJECTION: forcing a failure. [ 1451.744349] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.747025] CPU: 1 PID: 8946 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1451.748458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1451.750192] Call Trace: [ 1451.750757] dump_stack+0x107/0x167 [ 1451.751533] should_fail.cold+0x5/0xa [ 1451.752336] ? create_object.isra.0+0x3a/0xa20 [ 1451.753288] should_failslab+0x5/0x20 [ 1451.754095] kmem_cache_alloc+0x5b/0x310 [ 1451.754946] ? mark_held_locks+0x9e/0xe0 [ 1451.755802] create_object.isra.0+0x3a/0xa20 [ 1451.756721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1451.757779] kmem_cache_alloc_bulk+0x168/0x320 [ 1451.758714] io_submit_sqes+0x6fe6/0x8610 [ 1451.759599] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1451.760624] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1451.761613] ? find_held_lock+0x2c/0x110 [ 1451.762447] ? io_submit_sqes+0x8610/0x8610 [ 1451.763332] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1451.764344] ? wait_for_completion_io+0x270/0x270 [ 1451.765337] ? rcu_read_lock_any_held+0x75/0xa0 [ 1451.766290] ? vfs_write+0x354/0xb10 [ 1451.767040] ? fput_many+0x2f/0x1a0 [ 1451.767790] ? ksys_write+0x1a9/0x260 [ 1451.768565] ? __ia32_sys_read+0xb0/0xb0 [ 1451.769392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1451.770475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1451.771532] do_syscall_64+0x33/0x40 [ 1451.772300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1451.773353] RIP: 0033:0x7fa22a0e6b19 [ 1451.774131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.777965] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1451.779532] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1451.780982] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1451.782450] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1451.783897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1451.785351] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:51:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:23 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:23 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:23 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd620", 0x89}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:23 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:23 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:51:23 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 8) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:23 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1464.408158] FAULT_INJECTION: forcing a failure. [ 1464.408158] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.410707] CPU: 0 PID: 8967 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1464.412180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.413946] Call Trace: [ 1464.414520] dump_stack+0x107/0x167 [ 1464.415407] should_fail.cold+0x5/0xa [ 1464.416389] ? create_object.isra.0+0x3a/0xa20 [ 1464.417568] should_failslab+0x5/0x20 [ 1464.418557] kmem_cache_alloc+0x5b/0x310 [ 1464.419612] create_object.isra.0+0x3a/0xa20 [ 1464.420744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.422069] kmem_cache_alloc_bulk+0x168/0x320 [ 1464.423177] io_submit_sqes+0x6fe6/0x8610 [ 1464.424088] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1464.425150] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1464.426195] ? find_held_lock+0x2c/0x110 [ 1464.427073] ? io_submit_sqes+0x8610/0x8610 [ 1464.427998] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1464.429029] ? wait_for_completion_io+0x270/0x270 [ 1464.430078] ? rcu_read_lock_any_held+0x75/0xa0 [ 1464.431075] ? vfs_write+0x354/0xb10 [ 1464.431869] ? fput_many+0x2f/0x1a0 [ 1464.432634] ? ksys_write+0x1a9/0x260 [ 1464.433453] ? __ia32_sys_read+0xb0/0xb0 20:51:23 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd620", 0x89}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1464.434332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.435582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.436670] do_syscall_64+0x33/0x40 [ 1464.437457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.438538] RIP: 0033:0x7fa22a0e6b19 [ 1464.439323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.443161] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1464.444748] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1464.446248] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1464.447733] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.449197] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1464.450673] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:51:23 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:23 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1464.454289] FAULT_INJECTION: forcing a failure. [ 1464.454289] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.456141] CPU: 1 PID: 8973 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1464.457040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.458140] Call Trace: [ 1464.458503] dump_stack+0x107/0x167 [ 1464.458987] should_fail.cold+0x5/0xa [ 1464.459495] ? __alloc_skb+0x6d/0x5b0 [ 1464.460006] should_failslab+0x5/0x20 [ 1464.460513] kmem_cache_alloc_node+0x55/0x330 [ 1464.461106] __alloc_skb+0x6d/0x5b0 [ 1464.461593] netlink_dump+0x729/0x1070 [ 1464.462116] ? __netlink_kernel_create+0x860/0x860 [ 1464.462772] ? lock_downgrade+0x6d0/0x6d0 [ 1464.463330] __netlink_dump_start+0x62e/0x8e0 [ 1464.463930] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1464.464487] ? do_set_master+0x230/0x230 [ 1464.465024] ? rtnl_fdb_dump+0xa30/0xa30 [ 1464.465560] ? do_set_master+0x230/0x230 [ 1464.466112] ? lock_acquire+0x197/0x470 [ 1464.466633] ? netlink_deliver_tap+0xf4/0xcc0 [ 1464.467226] netlink_rcv_skb+0x14b/0x430 [ 1464.467760] ? rtnl_fdb_dump+0xa30/0xa30 [ 1464.468294] ? netlink_ack+0xab0/0xab0 [ 1464.468814] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1464.469414] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1464.470031] ? is_vmalloc_addr+0x7b/0xb0 [ 1464.470563] netlink_unicast+0x54e/0x800 [ 1464.471095] ? netlink_attachskb+0x870/0x870 [ 1464.471676] netlink_sendmsg+0x90f/0xe00 [ 1464.472208] ? netlink_unicast+0x800/0x800 [ 1464.472766] ? netlink_unicast+0x800/0x800 [ 1464.473317] __sock_sendmsg+0x154/0x190 [ 1464.473843] ____sys_sendmsg+0x70d/0x870 [ 1464.474373] ? sock_write_iter+0x3d0/0x3d0 [ 1464.474923] ? do_recvmmsg+0x6d0/0x6d0 [ 1464.475432] ? lock_downgrade+0x6d0/0x6d0 [ 1464.475973] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1464.476655] ___sys_sendmsg+0xf3/0x170 [ 1464.477162] ? sendmsg_copy_msghdr+0x160/0x160 [ 1464.477761] ? __fget_files+0x2cf/0x520 [ 1464.478287] ? lock_downgrade+0x6d0/0x6d0 [ 1464.478831] ? find_held_lock+0x2c/0x110 [ 1464.479367] ? __fget_files+0x2f8/0x520 [ 1464.479891] ? __fget_light+0xea/0x290 [ 1464.480403] __sys_sendmsg+0xe5/0x1b0 [ 1464.480901] ? __sys_sendmsg_sock+0x40/0x40 [ 1464.481471] ? rcu_read_lock_any_held+0x75/0xa0 [ 1464.482099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.482790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.483462] do_syscall_64+0x33/0x40 [ 1464.483953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.484623] RIP: 0033:0x7fb36483cb19 [ 1464.485105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.487506] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.488502] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1464.489425] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1464.490359] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.491283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.492211] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:51:23 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 9) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1464.595261] FAULT_INJECTION: forcing a failure. [ 1464.595261] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.597007] CPU: 1 PID: 8989 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1464.597957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.599080] Call Trace: [ 1464.599446] dump_stack+0x107/0x167 [ 1464.599940] should_fail.cold+0x5/0xa [ 1464.600472] ? create_object.isra.0+0x3a/0xa20 [ 1464.601099] should_failslab+0x5/0x20 [ 1464.601612] kmem_cache_alloc+0x5b/0x310 [ 1464.602138] create_object.isra.0+0x3a/0xa20 [ 1464.602735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.603384] kmem_cache_alloc_node+0x169/0x330 [ 1464.604000] __alloc_skb+0x6d/0x5b0 [ 1464.604473] netlink_dump+0x729/0x1070 [ 1464.605002] ? __netlink_kernel_create+0x860/0x860 [ 1464.605639] ? lock_downgrade+0x6d0/0x6d0 [ 1464.606214] __netlink_dump_start+0x62e/0x8e0 [ 1464.606795] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1464.607359] ? do_set_master+0x230/0x230 [ 1464.607872] ? rtnl_fdb_dump+0xa30/0xa30 [ 1464.608407] ? do_set_master+0x230/0x230 [ 1464.608939] ? lock_acquire+0x197/0x470 [ 1464.609438] ? netlink_deliver_tap+0xf4/0xcc0 [ 1464.610045] netlink_rcv_skb+0x14b/0x430 [ 1464.610555] ? rtnl_fdb_dump+0xa30/0xa30 [ 1464.611104] ? netlink_ack+0xab0/0xab0 [ 1464.611616] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1464.612227] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1464.612799] ? is_vmalloc_addr+0x7b/0xb0 [ 1464.613340] netlink_unicast+0x54e/0x800 [ 1464.613881] ? netlink_attachskb+0x870/0x870 [ 1464.614472] netlink_sendmsg+0x90f/0xe00 [ 1464.615020] ? netlink_unicast+0x800/0x800 [ 1464.615629] ? netlink_unicast+0x800/0x800 [ 1464.616175] __sock_sendmsg+0x154/0x190 [ 1464.616717] ____sys_sendmsg+0x70d/0x870 [ 1464.617266] ? sock_write_iter+0x3d0/0x3d0 [ 1464.617855] ? do_recvmmsg+0x6d0/0x6d0 [ 1464.618384] ? lock_downgrade+0x6d0/0x6d0 [ 1464.618915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1464.619616] ___sys_sendmsg+0xf3/0x170 [ 1464.620137] ? sendmsg_copy_msghdr+0x160/0x160 [ 1464.620750] ? __fget_files+0x2cf/0x520 [ 1464.621248] ? lock_downgrade+0x6d0/0x6d0 [ 1464.621804] ? find_held_lock+0x2c/0x110 [ 1464.622319] ? __fget_files+0x2f8/0x520 [ 1464.622860] ? __fget_light+0xea/0x290 [ 1464.623378] __sys_sendmsg+0xe5/0x1b0 [ 1464.623890] ? __sys_sendmsg_sock+0x40/0x40 [ 1464.624468] ? rcu_read_lock_any_held+0x75/0xa0 [ 1464.625071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.625775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.626461] do_syscall_64+0x33/0x40 [ 1464.626956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.627596] RIP: 0033:0x7fb36483cb19 [ 1464.628088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.630442] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.631378] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1464.632256] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1464.633132] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.634021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.634903] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:51:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:24 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:24 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 21) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd620", 0x89}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:24 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1464.720221] FAULT_INJECTION: forcing a failure. [ 1464.720221] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.723024] CPU: 0 PID: 8999 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1464.724511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.726366] Call Trace: [ 1464.726920] dump_stack+0x107/0x167 [ 1464.727686] should_fail.cold+0x5/0xa [ 1464.728479] ? create_object.isra.0+0x3a/0xa20 [ 1464.729479] should_failslab+0x5/0x20 [ 1464.730285] kmem_cache_alloc+0x5b/0x310 [ 1464.731125] ? mark_held_locks+0x9e/0xe0 [ 1464.732003] create_object.isra.0+0x3a/0xa20 [ 1464.732963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.734071] kmem_cache_alloc_bulk+0x168/0x320 [ 1464.735031] io_submit_sqes+0x6fe6/0x8610 [ 1464.735950] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1464.737061] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1464.738118] ? find_held_lock+0x2c/0x110 [ 1464.738996] ? io_submit_sqes+0x8610/0x8610 [ 1464.739928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1464.741008] ? wait_for_completion_io+0x270/0x270 [ 1464.742077] ? rcu_read_lock_any_held+0x75/0xa0 [ 1464.743089] ? vfs_write+0x354/0xb10 [ 1464.743895] ? fput_many+0x2f/0x1a0 [ 1464.744720] ? ksys_write+0x1a9/0x260 [ 1464.745546] ? __ia32_sys_read+0xb0/0xb0 [ 1464.746440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.747576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1464.748724] do_syscall_64+0x33/0x40 [ 1464.749530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1464.750640] RIP: 0033:0x7fa22a0e6b19 [ 1464.751412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.755239] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1464.756839] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1464.758325] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1464.759802] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.761278] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1464.762774] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:51:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:38 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 22) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:51:38 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004", 0x8b}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:38 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 10) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1478.707890] FAULT_INJECTION: forcing a failure. [ 1478.707890] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.709777] CPU: 1 PID: 9021 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1478.710279] FAULT_INJECTION: forcing a failure. [ 1478.710279] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.710752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.710758] Call Trace: [ 1478.710781] dump_stack+0x107/0x167 [ 1478.710806] should_fail.cold+0x5/0xa [ 1478.710830] ? create_object.isra.0+0x3a/0xa20 [ 1478.710853] should_failslab+0x5/0x20 [ 1478.710873] kmem_cache_alloc+0x5b/0x310 [ 1478.710896] ? mark_held_locks+0x9e/0xe0 [ 1478.710920] create_object.isra.0+0x3a/0xa20 [ 1478.710937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1478.710969] kmem_cache_alloc_bulk+0x168/0x320 [ 1478.720209] io_submit_sqes+0x6fe6/0x8610 [ 1478.720824] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1478.721527] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1478.722228] ? find_held_lock+0x2c/0x110 [ 1478.722803] ? io_submit_sqes+0x8610/0x8610 [ 1478.723410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1478.724104] ? wait_for_completion_io+0x270/0x270 [ 1478.724782] ? rcu_read_lock_any_held+0x75/0xa0 [ 1478.725431] ? vfs_write+0x354/0xb10 [ 1478.725972] ? fput_many+0x2f/0x1a0 [ 1478.726485] ? ksys_write+0x1a9/0x260 [ 1478.727023] ? __ia32_sys_read+0xb0/0xb0 [ 1478.727595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.728342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1478.729096] do_syscall_64+0x33/0x40 [ 1478.729621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.730373] RIP: 0033:0x7fa22a0e6b19 [ 1478.730919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.733489] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1478.734571] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1478.735565] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1478.736568] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.737576] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1478.738585] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1478.739649] CPU: 0 PID: 9033 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1478.741149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.742964] Call Trace: [ 1478.743550] dump_stack+0x107/0x167 [ 1478.744349] should_fail.cold+0x5/0xa [ 1478.745170] should_failslab+0x5/0x20 [ 1478.746019] __kmalloc_node_track_caller+0x74/0x3b0 [ 1478.747111] ? netlink_dump+0x729/0x1070 [ 1478.748001] __alloc_skb+0xb1/0x5b0 [ 1478.748801] netlink_dump+0x729/0x1070 [ 1478.749650] ? __netlink_kernel_create+0x860/0x860 [ 1478.750756] ? lock_downgrade+0x6d0/0x6d0 [ 1478.751660] __netlink_dump_start+0x62e/0x8e0 [ 1478.752644] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1478.753556] ? do_set_master+0x230/0x230 [ 1478.754462] ? rtnl_fdb_dump+0xa30/0xa30 [ 1478.755348] ? do_set_master+0x230/0x230 [ 1478.756212] ? lock_acquire+0x197/0x470 [ 1478.757185] ? netlink_deliver_tap+0xf4/0xcc0 [ 1478.758430] netlink_rcv_skb+0x14b/0x430 [ 1478.759539] ? rtnl_fdb_dump+0xa30/0xa30 [ 1478.760649] ? netlink_ack+0xab0/0xab0 [ 1478.761526] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1478.762554] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1478.763549] ? is_vmalloc_addr+0x7b/0xb0 [ 1478.764444] netlink_unicast+0x54e/0x800 [ 1478.765335] ? netlink_attachskb+0x870/0x870 [ 1478.766342] netlink_sendmsg+0x90f/0xe00 [ 1478.767232] ? netlink_unicast+0x800/0x800 [ 1478.768158] ? netlink_unicast+0x800/0x800 [ 1478.769077] __sock_sendmsg+0x154/0x190 [ 1478.769979] ____sys_sendmsg+0x70d/0x870 [ 1478.770899] ? sock_write_iter+0x3d0/0x3d0 [ 1478.771818] ? do_recvmmsg+0x6d0/0x6d0 [ 1478.772668] ? lock_downgrade+0x6d0/0x6d0 [ 1478.773584] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.774733] ___sys_sendmsg+0xf3/0x170 [ 1478.775581] ? sendmsg_copy_msghdr+0x160/0x160 [ 1478.776581] ? __fget_files+0x2cf/0x520 [ 1478.777457] ? lock_downgrade+0x6d0/0x6d0 [ 1478.778372] ? find_held_lock+0x2c/0x110 [ 1478.779246] ? __fget_files+0x2f8/0x520 [ 1478.780196] ? __fget_light+0xea/0x290 [ 1478.781053] __sys_sendmsg+0xe5/0x1b0 [ 1478.781896] ? __sys_sendmsg_sock+0x40/0x40 [ 1478.782891] ? rcu_read_lock_any_held+0x75/0xa0 [ 1478.783922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.785053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1478.786193] do_syscall_64+0x33/0x40 [ 1478.787028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.788128] RIP: 0033:0x7fb36483cb19 [ 1478.788919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.792847] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1478.794471] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1478.795975] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1478.797487] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.799004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1478.800512] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:51:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xc901, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:51:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:38 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 23) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:38 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004", 0x8b}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1478.942307] FAULT_INJECTION: forcing a failure. [ 1478.942307] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.945012] CPU: 0 PID: 9050 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1478.946510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.948336] Call Trace: [ 1478.948922] dump_stack+0x107/0x167 [ 1478.949761] should_fail.cold+0x5/0xa [ 1478.950635] ? create_object.isra.0+0x3a/0xa20 [ 1478.951729] should_failslab+0x5/0x20 [ 1478.952626] kmem_cache_alloc+0x5b/0x310 [ 1478.953506] ? mark_held_locks+0x9e/0xe0 [ 1478.954423] create_object.isra.0+0x3a/0xa20 [ 1478.955354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1478.956488] kmem_cache_alloc_bulk+0x168/0x320 [ 1478.957480] io_submit_sqes+0x6fe6/0x8610 [ 1478.958436] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1478.959529] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1478.960608] ? find_held_lock+0x2c/0x110 [ 1478.961541] ? io_submit_sqes+0x8610/0x8610 [ 1478.962739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1478.964060] ? wait_for_completion_io+0x270/0x270 [ 1478.965313] ? rcu_read_lock_any_held+0x75/0xa0 [ 1478.966374] ? vfs_write+0x354/0xb10 [ 1478.967189] ? fput_many+0x2f/0x1a0 [ 1478.967996] ? ksys_write+0x1a9/0x260 [ 1478.968839] ? __ia32_sys_read+0xb0/0xb0 [ 1478.969755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.970957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1478.972157] do_syscall_64+0x33/0x40 [ 1478.973034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1478.974159] RIP: 0033:0x7fa22a0e6b19 [ 1478.974968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.978967] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1478.980576] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1478.982086] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1478.983591] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1478.985116] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1478.986627] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1479.004961] FAULT_INJECTION: forcing a failure. [ 1479.004961] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.009301] CPU: 0 PID: 9059 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1479.010765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1479.012517] Call Trace: [ 1479.013078] dump_stack+0x107/0x167 [ 1479.013858] should_fail.cold+0x5/0xa [ 1479.014671] ? create_object.isra.0+0x3a/0xa20 [ 1479.015637] should_failslab+0x5/0x20 [ 1479.016440] kmem_cache_alloc+0x5b/0x310 [ 1479.017307] create_object.isra.0+0x3a/0xa20 [ 1479.018244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1479.019320] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1479.020389] ? netlink_dump+0x729/0x1070 [ 1479.021253] __alloc_skb+0xb1/0x5b0 [ 1479.022034] netlink_dump+0x729/0x1070 [ 1479.022869] ? __netlink_kernel_create+0x860/0x860 20:51:38 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 11) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1479.024105] ? lock_downgrade+0x6d0/0x6d0 [ 1479.024979] __netlink_dump_start+0x62e/0x8e0 [ 1479.025922] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1479.026811] ? do_set_master+0x230/0x230 [ 1479.027669] ? rtnl_fdb_dump+0xa30/0xa30 [ 1479.028523] ? do_set_master+0x230/0x230 [ 1479.029378] ? lock_acquire+0x197/0x470 [ 1479.030218] ? netlink_deliver_tap+0xf4/0xcc0 [ 1479.031160] netlink_rcv_skb+0x14b/0x430 [ 1479.032009] ? rtnl_fdb_dump+0xa30/0xa30 [ 1479.032859] ? netlink_ack+0xab0/0xab0 [ 1479.033671] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1479.034639] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1479.035594] ? is_vmalloc_addr+0x7b/0xb0 [ 1479.036457] netlink_unicast+0x54e/0x800 [ 1479.037311] ? netlink_attachskb+0x870/0x870 [ 1479.038252] netlink_sendmsg+0x90f/0xe00 [ 1479.039109] ? netlink_unicast+0x800/0x800 [ 1479.040008] ? netlink_unicast+0x800/0x800 [ 1479.040896] __sock_sendmsg+0x154/0x190 [ 1479.041738] ____sys_sendmsg+0x70d/0x870 [ 1479.042606] ? sock_write_iter+0x3d0/0x3d0 [ 1479.043490] ? do_recvmmsg+0x6d0/0x6d0 [ 1479.044309] ? lock_downgrade+0x6d0/0x6d0 [ 1479.045179] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1479.046293] ___sys_sendmsg+0xf3/0x170 [ 1479.047118] ? sendmsg_copy_msghdr+0x160/0x160 [ 1479.048082] ? __fget_files+0x2cf/0x520 [ 1479.048919] ? lock_downgrade+0x6d0/0x6d0 [ 1479.049792] ? find_held_lock+0x2c/0x110 [ 1479.050673] ? __fget_files+0x2f8/0x520 [ 1479.051519] ? __fget_light+0xea/0x290 [ 1479.052347] __sys_sendmsg+0xe5/0x1b0 [ 1479.053149] ? __sys_sendmsg_sock+0x40/0x40 [ 1479.054063] ? rcu_read_lock_any_held+0x75/0xa0 [ 1479.055063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1479.056170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1479.057259] do_syscall_64+0x33/0x40 [ 1479.058057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1479.059129] RIP: 0033:0x7fb36483cb19 [ 1479.059912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1479.063799] RSP: 002b:00007fb361db2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1479.065402] RAX: ffffffffffffffda RBX: 00007fb36494ff60 RCX: 00007fb36483cb19 [ 1479.066918] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1479.068419] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.069918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.071426] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 20:51:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 12) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004", 0x8b}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:51:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1491.819028] FAULT_INJECTION: forcing a failure. [ 1491.819028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1491.821765] CPU: 0 PID: 9074 Comm: syz-executor.2 Not tainted 5.10.238 #1 [ 1491.823202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1491.825057] Call Trace: [ 1491.825630] dump_stack+0x107/0x167 [ 1491.826468] should_fail.cold+0x5/0xa [ 1491.827362] _copy_to_user+0x2e/0x180 [ 1491.828253] simple_read_from_buffer+0xcc/0x160 [ 1491.829338] proc_fail_nth_read+0x198/0x230 [ 1491.830369] ? proc_sessionid_read+0x230/0x230 [ 1491.831434] ? security_file_permission+0xb1/0xe0 [ 1491.832563] ? proc_sessionid_read+0x230/0x230 [ 1491.833628] vfs_read+0x228/0x620 [ 1491.834457] ksys_read+0x12d/0x260 [ 1491.835280] ? vfs_write+0xb10/0xb10 [ 1491.836148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1491.837361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1491.838565] do_syscall_64+0x33/0x40 [ 1491.839428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1491.840612] RIP: 0033:0x7fb3647ef69c [ 1491.841471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1491.845739] RSP: 002b:00007fb361db2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 20:51:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:51 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 24) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:51 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:51 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xff00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:51 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1491.847825] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007fb3647ef69c [ 1491.847859] RDX: 000000000000000f RSI: 00007fb361db21e0 RDI: 0000000000000005 [ 1491.847870] RBP: 00007fb361db21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.847882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 20:51:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a7", 0x8c}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1491.847895] R13: 00007fff232638cf R14: 00007fb361db2300 R15: 0000000000022000 [ 1491.849328] FAULT_INJECTION: forcing a failure. [ 1491.849328] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.849344] CPU: 1 PID: 9079 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1491.849352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1491.849356] Call Trace: [ 1491.849374] dump_stack+0x107/0x167 [ 1491.849390] should_fail.cold+0x5/0xa [ 1491.849406] ? create_object.isra.0+0x3a/0xa20 [ 1491.849427] should_failslab+0x5/0x20 [ 1491.849440] kmem_cache_alloc+0x5b/0x310 [ 1491.849454] ? mark_held_locks+0x9e/0xe0 [ 1491.849469] create_object.isra.0+0x3a/0xa20 [ 1491.849480] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1491.849496] kmem_cache_alloc_bulk+0x168/0x320 [ 1491.849514] io_submit_sqes+0x6fe6/0x8610 [ 1491.849545] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1491.849556] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1491.849570] ? find_held_lock+0x2c/0x110 [ 1491.849586] ? io_submit_sqes+0x8610/0x8610 [ 1491.849603] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1491.849617] ? wait_for_completion_io+0x270/0x270 [ 1491.849632] ? rcu_read_lock_any_held+0x75/0xa0 [ 1491.849644] ? vfs_write+0x354/0xb10 [ 1491.849657] ? fput_many+0x2f/0x1a0 [ 1491.849670] ? ksys_write+0x1a9/0x260 [ 1491.849683] ? __ia32_sys_read+0xb0/0xb0 [ 1491.849698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1491.849715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1491.849730] do_syscall_64+0x33/0x40 [ 1491.849743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1491.849751] RIP: 0033:0x7fa22a0e6b19 [ 1491.849763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1491.849769] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1491.849784] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1491.849791] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1491.849798] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.849805] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1491.849812] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:51:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:51:51 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:51:51 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 25) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:51:51 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:51:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28c"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1492.117073] FAULT_INJECTION: forcing a failure. [ 1492.117073] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.120304] CPU: 0 PID: 9102 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1492.121895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1492.123803] Call Trace: [ 1492.124413] dump_stack+0x107/0x167 [ 1492.125250] should_fail.cold+0x5/0xa [ 1492.126136] should_failslab+0x5/0x20 [ 1492.127011] kmem_cache_alloc_bulk+0x4b/0x320 [ 1492.128053] io_submit_sqes+0x6fe6/0x8610 [ 1492.129033] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1492.130189] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1492.131293] ? find_held_lock+0x2c/0x110 [ 1492.132223] ? io_submit_sqes+0x8610/0x8610 [ 1492.133193] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1492.134322] ? wait_for_completion_io+0x270/0x270 [ 1492.135411] ? rcu_read_lock_any_held+0x75/0xa0 [ 1492.136492] ? vfs_write+0x354/0xb10 [ 1492.137358] ? fput_many+0x2f/0x1a0 [ 1492.138215] ? ksys_write+0x1a9/0x260 [ 1492.139102] ? __ia32_sys_read+0xb0/0xb0 [ 1492.140050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1492.141268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1492.142476] do_syscall_64+0x33/0x40 [ 1492.143343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1492.144531] RIP: 0033:0x7fa22a0e6b19 [ 1492.145400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.149716] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1492.151505] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1492.153166] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1492.154834] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1492.156496] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1492.158152] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:52:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:04 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 26) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:04 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a7", 0x8c}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:04 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28c"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:04 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1505.441188] FAULT_INJECTION: forcing a failure. [ 1505.441188] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.444138] CPU: 1 PID: 9125 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1505.445801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1505.447812] Call Trace: [ 1505.448465] dump_stack+0x107/0x167 [ 1505.449352] should_fail.cold+0x5/0xa [ 1505.450297] ? create_object.isra.0+0x3a/0xa20 [ 1505.451399] should_failslab+0x5/0x20 [ 1505.452321] kmem_cache_alloc+0x5b/0x310 [ 1505.453304] ? mark_held_locks+0x9e/0xe0 [ 1505.454305] create_object.isra.0+0x3a/0xa20 [ 1505.455359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1505.456597] kmem_cache_alloc_bulk+0x168/0x320 [ 1505.457703] io_submit_sqes+0x6fe6/0x8610 [ 1505.458762] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1505.459941] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1505.461091] ? find_held_lock+0x2c/0x110 [ 1505.462082] ? io_submit_sqes+0x8610/0x8610 [ 1505.463142] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1505.464312] ? wait_for_completion_io+0x270/0x270 [ 1505.465482] ? rcu_read_lock_any_held+0x75/0xa0 [ 1505.466618] ? vfs_write+0x354/0xb10 [ 1505.467527] ? fput_many+0x2f/0x1a0 [ 1505.468393] ? ksys_write+0x1a9/0x260 [ 1505.469305] ? __ia32_sys_read+0xb0/0xb0 [ 1505.470305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1505.471573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1505.472826] do_syscall_64+0x33/0x40 [ 1505.473731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1505.474970] RIP: 0033:0x7fa22a0e6b19 [ 1505.475873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1505.480353] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1505.482217] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1505.483971] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1505.485709] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1505.487458] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1505.489187] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:52:04 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:04 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:52:05 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28c"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:05 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a7", 0x8c}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:05 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:17 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:17 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:52:17 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 27) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:17 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1517.868606] FAULT_INJECTION: forcing a failure. [ 1517.868606] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.870102] CPU: 1 PID: 9174 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1517.870900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.871855] Call Trace: [ 1517.872167] dump_stack+0x107/0x167 [ 1517.872591] should_fail.cold+0x5/0xa [ 1517.873028] ? create_object.isra.0+0x3a/0xa20 [ 1517.873560] should_failslab+0x5/0x20 [ 1517.874001] kmem_cache_alloc+0x5b/0x310 [ 1517.874474] ? mark_held_locks+0x9e/0xe0 [ 1517.874949] create_object.isra.0+0x3a/0xa20 [ 1517.875459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.876042] kmem_cache_alloc_bulk+0x168/0x320 [ 1517.876563] io_submit_sqes+0x6fe6/0x8610 [ 1517.877064] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.877639] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.878187] ? find_held_lock+0x2c/0x110 [ 1517.878664] ? io_submit_sqes+0x8610/0x8610 [ 1517.879159] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.879728] ? wait_for_completion_io+0x270/0x270 [ 1517.880279] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.880819] ? vfs_write+0x354/0xb10 [ 1517.881246] ? fput_many+0x2f/0x1a0 [ 1517.881663] ? ksys_write+0x1a9/0x260 [ 1517.882104] ? __ia32_sys_read+0xb0/0xb0 [ 1517.882591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.883197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.883787] do_syscall_64+0x33/0x40 [ 1517.884223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1517.884808] RIP: 0033:0x7fa22a0e6b19 [ 1517.885245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.887369] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.888248] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1517.889076] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1517.889898] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.890728] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1517.891560] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:52:17 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:17 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:17 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:52:17 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 28) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:17 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1518.071988] FAULT_INJECTION: forcing a failure. [ 1518.071988] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.073646] CPU: 1 PID: 9209 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1518.074441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1518.075388] Call Trace: [ 1518.075694] dump_stack+0x107/0x167 [ 1518.076113] should_fail.cold+0x5/0xa [ 1518.076550] ? create_object.isra.0+0x3a/0xa20 [ 1518.077071] should_failslab+0x5/0x20 [ 1518.077509] kmem_cache_alloc+0x5b/0x310 [ 1518.077966] ? mark_held_locks+0x9e/0xe0 [ 1518.078437] create_object.isra.0+0x3a/0xa20 [ 1518.078951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1518.079538] kmem_cache_alloc_bulk+0x168/0x320 [ 1518.080060] io_submit_sqes+0x6fe6/0x8610 [ 1518.080549] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1518.081123] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1518.081678] ? find_held_lock+0x2c/0x110 [ 1518.082152] ? io_submit_sqes+0x8610/0x8610 [ 1518.082668] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1518.083223] ? wait_for_completion_io+0x270/0x270 [ 1518.083778] ? rcu_read_lock_any_held+0x75/0xa0 [ 1518.084305] ? vfs_write+0x354/0xb10 [ 1518.084734] ? fput_many+0x2f/0x1a0 [ 1518.085147] ? ksys_write+0x1a9/0x260 [ 1518.085582] ? __ia32_sys_read+0xb0/0xb0 [ 1518.086051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1518.086661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1518.087252] do_syscall_64+0x33/0x40 [ 1518.087674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1518.088252] RIP: 0033:0x7fa22a0e6b19 [ 1518.088680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1518.090789] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1518.091661] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 20:52:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1518.092479] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1518.093577] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1518.094387] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1518.095211] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:52:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:30 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 29) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:30 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:30 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:52:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1531.649627] FAULT_INJECTION: forcing a failure. [ 1531.649627] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.651939] CPU: 1 PID: 9236 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1531.653153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1531.654631] Call Trace: [ 1531.655104] dump_stack+0x107/0x167 [ 1531.655751] should_fail.cold+0x5/0xa [ 1531.656427] ? create_object.isra.0+0x3a/0xa20 [ 1531.657239] should_failslab+0x5/0x20 [ 1531.657905] kmem_cache_alloc+0x5b/0x310 [ 1531.658631] ? mark_held_locks+0x9e/0xe0 [ 1531.659344] create_object.isra.0+0x3a/0xa20 [ 1531.660110] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1531.661066] kmem_cache_alloc_bulk+0x168/0x320 [ 1531.661872] io_submit_sqes+0x6fe6/0x8610 [ 1531.662628] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1531.663548] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1531.664450] ? find_held_lock+0x2c/0x110 [ 1531.665216] ? io_submit_sqes+0x8610/0x8610 [ 1531.666029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1531.666924] ? wait_for_completion_io+0x270/0x270 [ 1531.667833] ? rcu_read_lock_any_held+0x75/0xa0 [ 1531.668702] ? vfs_write+0x354/0xb10 [ 1531.669403] ? fput_many+0x2f/0x1a0 [ 1531.670086] ? ksys_write+0x1a9/0x260 [ 1531.670798] ? __ia32_sys_read+0xb0/0xb0 [ 1531.671512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1531.672498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1531.673463] do_syscall_64+0x33/0x40 [ 1531.674158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1531.675124] RIP: 0033:0x7fa22a0e6b19 [ 1531.675819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1531.679243] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1531.680647] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1531.681970] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1531.683306] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1531.684624] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1531.685958] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:52:31 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1531.773991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9251 comm=syz-executor.1 20:52:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {0x0}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661a"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:45 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:45 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1546.599997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9272 comm=syz-executor.1 20:52:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661a"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:45 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:45 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:45 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 30) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:52:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {0x0}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1546.645184] FAULT_INJECTION: forcing a failure. [ 1546.645184] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.647805] CPU: 1 PID: 9286 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1546.649273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.651058] Call Trace: [ 1546.651634] dump_stack+0x107/0x167 [ 1546.652416] should_fail.cold+0x5/0xa [ 1546.653225] ? create_object.isra.0+0x3a/0xa20 [ 1546.654206] should_failslab+0x5/0x20 [ 1546.655032] kmem_cache_alloc+0x5b/0x310 [ 1546.655898] ? mark_held_locks+0x9e/0xe0 [ 1546.656760] create_object.isra.0+0x3a/0xa20 [ 1546.657690] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.658772] kmem_cache_alloc_bulk+0x168/0x320 [ 1546.659762] io_submit_sqes+0x6fe6/0x8610 [ 1546.660669] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1546.661727] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1546.662755] ? find_held_lock+0x2c/0x110 [ 1546.663633] ? io_submit_sqes+0x8610/0x8610 [ 1546.664555] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1546.665586] ? wait_for_completion_io+0x270/0x270 [ 1546.666617] ? rcu_read_lock_any_held+0x75/0xa0 [ 1546.667606] ? vfs_write+0x354/0xb10 [ 1546.668400] ? fput_many+0x2f/0x1a0 [ 1546.669173] ? ksys_write+0x1a9/0x260 [ 1546.669998] ? __ia32_sys_read+0xb0/0xb0 [ 1546.670871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.671981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.673077] do_syscall_64+0x33/0x40 [ 1546.673869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.674970] RIP: 0033:0x7fa22a0e6b19 [ 1546.675758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.679664] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1546.681287] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1546.682804] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1546.684334] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.685842] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1546.687358] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:52:46 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x1eb, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:46 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:52:46 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:52:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {0x0}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:52:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661a"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:52:46 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:52:46 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 31) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1546.812117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9296 comm=syz-executor.1 20:52:46 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1546.943913] FAULT_INJECTION: forcing a failure. [ 1546.943913] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.946803] CPU: 0 PID: 9311 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1546.948405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1546.950345] Call Trace: [ 1546.950975] dump_stack+0x107/0x167 [ 1546.951830] should_fail.cold+0x5/0xa [ 1546.952724] ? create_object.isra.0+0x3a/0xa20 [ 1546.953786] should_failslab+0x5/0x20 [ 1546.954664] kmem_cache_alloc+0x5b/0x310 [ 1546.955622] ? mark_held_locks+0x9e/0xe0 [ 1546.956568] create_object.isra.0+0x3a/0xa20 [ 1546.957582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1546.958763] kmem_cache_alloc_bulk+0x168/0x320 [ 1546.959844] io_submit_sqes+0x6fe6/0x8610 [ 1546.960835] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1546.961991] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1546.963135] ? find_held_lock+0x2c/0x110 [ 1546.964069] ? io_submit_sqes+0x8610/0x8610 [ 1546.965041] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1546.966174] ? wait_for_completion_io+0x270/0x270 [ 1546.967321] ? rcu_read_lock_any_held+0x75/0xa0 [ 1546.968410] ? vfs_write+0x354/0xb10 [ 1546.969283] ? fput_many+0x2f/0x1a0 [ 1546.970130] ? ksys_write+0x1a9/0x260 [ 1546.971024] ? __ia32_sys_read+0xb0/0xb0 [ 1546.971969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1546.973190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1546.974389] do_syscall_64+0x33/0x40 [ 1546.975253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1546.976449] RIP: 0033:0x7fa22a0e6b19 [ 1546.977317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1546.981590] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1546.983385] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1546.985038] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1546.986659] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1546.988331] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1546.989968] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:53:01 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 32) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:01 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:01 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:01 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(0x0) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:53:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c7"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1562.205282] FAULT_INJECTION: forcing a failure. [ 1562.205282] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.208308] CPU: 0 PID: 9334 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1562.209827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.211674] Call Trace: [ 1562.212263] dump_stack+0x107/0x167 [ 1562.213073] should_fail.cold+0x5/0xa [ 1562.213920] ? create_object.isra.0+0x3a/0xa20 [ 1562.214935] should_failslab+0x5/0x20 [ 1562.215822] kmem_cache_alloc+0x5b/0x310 [ 1562.216938] ? mark_held_locks+0x9e/0xe0 [ 1562.218056] create_object.isra.0+0x3a/0xa20 [ 1562.219068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.220463] kmem_cache_alloc_bulk+0x168/0x320 [ 1562.221714] io_submit_sqes+0x6fe6/0x8610 [ 1562.222880] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1562.224259] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1562.225348] ? find_held_lock+0x2c/0x110 [ 1562.226454] ? io_submit_sqes+0x8610/0x8610 [ 1562.227672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1562.228990] ? wait_for_completion_io+0x270/0x270 [ 1562.230316] ? rcu_read_lock_any_held+0x75/0xa0 [ 1562.231596] ? vfs_write+0x354/0xb10 [ 1562.232617] ? fput_many+0x2f/0x1a0 [ 1562.233609] ? ksys_write+0x1a9/0x260 [ 1562.234651] ? __ia32_sys_read+0xb0/0xb0 [ 1562.235771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.237202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.238611] do_syscall_64+0x33/0x40 [ 1562.239633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1562.241035] RIP: 0033:0x7fa22a0e6b19 [ 1562.242043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.247097] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1562.249148] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1562.251101] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1562.253032] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.255011] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1562.256955] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:53:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:01 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:01 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c7"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(0x0) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:53:01 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xc9010000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:01 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 33) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1562.542161] FAULT_INJECTION: forcing a failure. [ 1562.542161] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.544901] CPU: 0 PID: 9367 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1562.546490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.548454] Call Trace: [ 1562.549078] dump_stack+0x107/0x167 [ 1562.549938] should_fail.cold+0x5/0xa [ 1562.550835] ? create_object.isra.0+0x3a/0xa20 [ 1562.551916] should_failslab+0x5/0x20 [ 1562.552791] kmem_cache_alloc+0x5b/0x310 [ 1562.553739] ? mark_held_locks+0x9e/0xe0 [ 1562.554683] create_object.isra.0+0x3a/0xa20 [ 1562.555718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.556896] kmem_cache_alloc_bulk+0x168/0x320 [ 1562.557964] io_submit_sqes+0x6fe6/0x8610 [ 1562.558945] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1562.560096] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1562.561205] ? find_held_lock+0x2c/0x110 [ 1562.562155] ? io_submit_sqes+0x8610/0x8610 [ 1562.563169] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1562.564289] ? wait_for_completion_io+0x270/0x270 [ 1562.565416] ? rcu_read_lock_any_held+0x75/0xa0 [ 1562.566502] ? vfs_write+0x354/0xb10 [ 1562.567507] ? fput_many+0x2f/0x1a0 [ 1562.568456] ? ksys_write+0x1a9/0x260 [ 1562.569444] ? __ia32_sys_read+0xb0/0xb0 [ 1562.570503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.571899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.572689] do_syscall_64+0x33/0x40 [ 1562.573265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1562.574051] RIP: 0033:0x7fa22a0e6b19 [ 1562.574621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.577207] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1562.578185] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1562.579113] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1562.580049] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.580978] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1562.581907] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:53:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:14 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 34) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:14 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900", 0x68}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:14 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(0x0) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:53:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c7"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1574.894210] FAULT_INJECTION: forcing a failure. [ 1574.894210] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.896586] CPU: 0 PID: 9388 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1574.897729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1574.899110] Call Trace: [ 1574.899593] dump_stack+0x107/0x167 [ 1574.900241] should_fail.cold+0x5/0xa [ 1574.900915] ? create_object.isra.0+0x3a/0xa20 [ 1574.901720] should_failslab+0x5/0x20 [ 1574.902390] kmem_cache_alloc+0x5b/0x310 [ 1574.903105] ? mark_held_locks+0x9e/0xe0 [ 1574.903832] create_object.isra.0+0x3a/0xa20 [ 1574.904602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1574.905495] kmem_cache_alloc_bulk+0x168/0x320 [ 1574.906302] io_submit_sqes+0x6fe6/0x8610 [ 1574.907057] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1574.907949] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1574.908797] ? find_held_lock+0x2c/0x110 [ 1574.909518] ? io_submit_sqes+0x8610/0x8610 [ 1574.910289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1574.911155] ? wait_for_completion_io+0x270/0x270 [ 1574.912015] ? rcu_read_lock_any_held+0x75/0xa0 [ 1574.912829] ? vfs_write+0x354/0xb10 [ 1574.913487] ? fput_many+0x2f/0x1a0 [ 1574.914124] ? ksys_write+0x1a9/0x260 [ 1574.914789] ? __ia32_sys_read+0xb0/0xb0 [ 1574.915515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1574.916311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1574.916904] do_syscall_64+0x33/0x40 [ 1574.917332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1574.917924] RIP: 0033:0x7fa22a0e6b19 [ 1574.918350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1574.920469] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1574.921348] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1574.922172] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1574.923001] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1574.923833] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1574.924652] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:53:14 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xff000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:14 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900", 0x68}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:14 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 35) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900", 0x68}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1575.108333] FAULT_INJECTION: forcing a failure. [ 1575.108333] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.111092] CPU: 1 PID: 9417 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1575.112675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.114577] Call Trace: [ 1575.115191] dump_stack+0x107/0x167 [ 1575.116026] should_fail.cold+0x5/0xa [ 1575.116899] ? create_object.isra.0+0x3a/0xa20 [ 1575.117950] should_failslab+0x5/0x20 [ 1575.118824] kmem_cache_alloc+0x5b/0x310 [ 1575.119766] ? mark_held_locks+0x9e/0xe0 [ 1575.120700] create_object.isra.0+0x3a/0xa20 [ 1575.121704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1575.122871] kmem_cache_alloc_bulk+0x168/0x320 [ 1575.123930] io_submit_sqes+0x6fe6/0x8610 [ 1575.124911] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1575.126053] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1575.127166] ? find_held_lock+0x2c/0x110 [ 1575.128103] ? io_submit_sqes+0x8610/0x8610 [ 1575.129099] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1575.130203] ? wait_for_completion_io+0x270/0x270 [ 1575.131314] ? rcu_read_lock_any_held+0x75/0xa0 [ 1575.132375] ? vfs_write+0x354/0xb10 [ 1575.133228] ? fput_many+0x2f/0x1a0 [ 1575.134061] ? ksys_write+0x1a9/0x260 [ 1575.134932] ? __ia32_sys_read+0xb0/0xb0 [ 1575.135871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.137070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.138250] do_syscall_64+0x33/0x40 [ 1575.139100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.140281] RIP: 0033:0x7fa22a0e6b19 [ 1575.141135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.145364] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1575.147113] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1575.148776] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1575.150423] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.152079] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1575.153721] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 1582.495718] kworker/dying (419) used greatest stack depth: 22600 bytes left 20:53:27 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 36) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:27 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:27 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:27 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb", 0x9c}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:27 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1587.825124] FAULT_INJECTION: forcing a failure. [ 1587.825124] name failslab, interval 1, probability 0, space 0, times 0 20:53:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1587.827775] CPU: 0 PID: 9435 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1587.829402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1587.831147] Call Trace: [ 1587.831717] dump_stack+0x107/0x167 [ 1587.832487] should_fail.cold+0x5/0xa [ 1587.833294] ? create_object.isra.0+0x3a/0xa20 [ 1587.834264] should_failslab+0x5/0x20 [ 1587.835068] kmem_cache_alloc+0x5b/0x310 [ 1587.835936] ? mark_held_locks+0x9e/0xe0 [ 1587.836794] create_object.isra.0+0x3a/0xa20 [ 1587.837719] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1587.838789] kmem_cache_alloc_bulk+0x168/0x320 [ 1587.839755] io_submit_sqes+0x6fe6/0x8610 [ 1587.840656] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1587.841694] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1587.842705] ? find_held_lock+0x2c/0x110 [ 1587.843557] ? io_submit_sqes+0x8610/0x8610 [ 1587.844457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1587.845458] ? wait_for_completion_io+0x270/0x270 [ 1587.846476] ? rcu_read_lock_any_held+0x75/0xa0 [ 1587.847456] ? vfs_write+0x354/0xb10 [ 1587.848225] ? fput_many+0x2f/0x1a0 [ 1587.848985] ? ksys_write+0x1a9/0x260 [ 1587.849775] ? __ia32_sys_read+0xb0/0xb0 [ 1587.850619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1587.851713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1587.852786] do_syscall_64+0x33/0x40 [ 1587.853561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1587.854634] RIP: 0033:0x7fa22a0e6b19 [ 1587.855412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.859237] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1587.861021] RAX: ffffffffffffffda RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 1587.862712] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1587.864405] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1587.866091] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1587.867790] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:53:27 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:27 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb", 0x9c}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:27 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xeb01, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:27 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:40 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:53:40 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb", 0x9c}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c46224"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:40 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, 0x0, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:40 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 37) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:40 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1600.935335] FAULT_INJECTION: forcing a failure. [ 1600.935335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1600.938019] CPU: 0 PID: 9490 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 1600.939463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1600.941202] Call Trace: [ 1600.941759] dump_stack+0x107/0x167 [ 1600.942525] should_fail.cold+0x5/0xa [ 1600.943328] _copy_to_user+0x2e/0x180 [ 1600.944146] simple_read_from_buffer+0xcc/0x160 [ 1600.945124] proc_fail_nth_read+0x198/0x230 [ 1600.946024] ? proc_sessionid_read+0x230/0x230 [ 1600.946975] ? security_file_permission+0xb1/0xe0 [ 1600.948010] ? proc_sessionid_read+0x230/0x230 [ 1600.948968] vfs_read+0x228/0x620 [ 1600.949698] ksys_read+0x12d/0x260 [ 1600.950447] ? vfs_write+0xb10/0xb10 [ 1600.951232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1600.952319] do_syscall_64+0x33/0x40 [ 1600.953100] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1600.954168] RIP: 0033:0x7fa22a09969c [ 1600.954949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1600.958800] RSP: 002b:00007fa22765c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1600.960406] RAX: ffffffffffffffda RBX: 000000000000030e RCX: 00007fa22a09969c [ 1600.961894] RDX: 000000000000000f RSI: 00007fa22765c1e0 RDI: 0000000000000007 [ 1600.963386] RBP: 00007fa22765c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.964878] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1600.966373] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 20:53:40 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e85", 0xb6}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:40 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, 0x0, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:40 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xff00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c46224"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:40 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:53 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xf, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:53 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, 0x0, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:53 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:53:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c46224"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:53 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e85", 0xb6}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:53:53 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:54 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:54 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x2000, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:53:54 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:53:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:53:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:53:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e85", 0xb6}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:09 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x16, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:09 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x800000, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:09 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:09 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:09 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xc0, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56ea", 0xc3}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:09 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:09 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:09 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:09 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x20000000, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:09 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xd9c, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:24 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:24 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:24 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0xfaffffff, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:24 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56ea", 0xc3}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:24 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xdec, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56ea", 0xc3}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:24 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:24 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe3c, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:24 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:24 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:24 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0xfffffffa, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:24 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) 20:54:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe88, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:38 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290", 0xc9}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) 20:54:38 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x8, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:38 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xec0, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:38 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290", 0xc9}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, 0x0, &(0x7f00000002c0)) 20:54:38 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:38 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x30e, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000002c0)) 20:54:38 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x33fe0, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:51 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:51 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20000054, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:51 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000002c0)) 20:54:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290", 0xc9}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:51 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x2000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:51 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000002c0)) 20:54:51 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7ffff000, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36aba", 0xcc}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:54:51 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:54:51 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x800000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:54:51 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000002c0)) 20:54:51 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xfffffdef, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:54:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:54:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:05 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:05 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36aba", 0xcc}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:05 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x20000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:05 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000002c0)) 20:55:05 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:55:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:05 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0xf, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1686.409318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=9804 comm=syz-executor.0 [ 1686.438688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=9804 comm=syz-executor.0 20:55:05 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4}, &(0x7f00000002c0)) 20:55:05 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x10, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:05 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:05 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36aba", 0xcc}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:05 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:55:05 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0xfaffffff) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:06 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, 0x0) 20:55:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) 20:55:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:55:19 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, 0x0) 20:55:19 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0xfffffffa) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:19 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x11, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:19 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e3", 0xce}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:19 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, 0x0) 20:55:19 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x12, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e3", 0xce}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:19 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) 20:55:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:55:20 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x10000000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:32 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x7ffffffff000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 1) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:55:32 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157d3d267b4165b845bd8d2e8", 0xb6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e3", 0xce}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:32 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x13, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:32 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xeb010000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) [ 1713.578055] FAULT_INJECTION: forcing a failure. [ 1713.578055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.581009] CPU: 0 PID: 9915 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1713.582564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.584443] Call Trace: [ 1713.585057] dump_stack+0x107/0x167 [ 1713.585902] should_fail.cold+0x5/0xa [ 1713.586777] _copy_from_user+0x2e/0x1b0 [ 1713.587687] __copy_msghdr_from_user+0x91/0x4b0 [ 1713.588747] ? __ia32_sys_shutdown+0x80/0x80 [ 1713.589757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.590947] ? __lock_acquire+0x1657/0x5b00 [ 1713.591938] ? __lock_acquire+0xbb1/0x5b00 [ 1713.592912] sendmsg_copy_msghdr+0xa1/0x160 [ 1713.593887] ? do_recvmmsg+0x6d0/0x6d0 [ 1713.594783] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.595968] ? lock_downgrade+0x6d0/0x6d0 [ 1713.596936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.598126] ___sys_sendmsg+0xc6/0x170 [ 1713.599023] ? sendmsg_copy_msghdr+0x160/0x160 [ 1713.600061] ? __fget_files+0x2cf/0x520 [ 1713.600986] ? lock_downgrade+0x6d0/0x6d0 [ 1713.601933] ? find_held_lock+0x2c/0x110 [ 1713.602879] ? __fget_files+0x2f8/0x520 [ 1713.603804] ? __fget_light+0xea/0x290 [ 1713.604708] __sys_sendmsg+0xe5/0x1b0 [ 1713.605596] ? __sys_sendmsg_sock+0x40/0x40 [ 1713.606601] ? rcu_read_lock_any_held+0x75/0xa0 [ 1713.607674] ? fput_many+0x2f/0x1a0 [ 1713.608521] ? ksys_write+0x1a9/0x260 [ 1713.609415] ? __ia32_sys_read+0xb0/0xb0 [ 1713.610363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.611585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.612786] do_syscall_64+0x33/0x40 [ 1713.613664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.614853] RIP: 0033:0x7fb9623a4b19 [ 1713.615715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.620008] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.621795] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1713.623463] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1713.625141] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.626816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.628487] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:55:33 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x14, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:55:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 20:55:33 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x80000000000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:33 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x15, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 2) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1713.900142] FAULT_INJECTION: forcing a failure. [ 1713.900142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.903220] CPU: 0 PID: 9944 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1713.904832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.906769] Call Trace: [ 1713.907385] dump_stack+0x107/0x167 [ 1713.908238] should_fail.cold+0x5/0xa [ 1713.909137] _copy_from_user+0x2e/0x1b0 [ 1713.910061] iovec_from_user+0x141/0x400 [ 1713.911007] __import_iovec+0x67/0x590 [ 1713.911911] ? __ia32_sys_shutdown+0x80/0x80 [ 1713.912953] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.914177] import_iovec+0x83/0xb0 [ 1713.915028] sendmsg_copy_msghdr+0x131/0x160 [ 1713.916049] ? do_recvmmsg+0x6d0/0x6d0 [ 1713.916965] ? lock_downgrade+0x6d0/0x6d0 [ 1713.917931] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.919154] ___sys_sendmsg+0xc6/0x170 [ 1713.920059] ? sendmsg_copy_msghdr+0x160/0x160 [ 1713.921132] ? __fget_files+0x2cf/0x520 [ 1713.922053] ? lock_downgrade+0x6d0/0x6d0 [ 1713.923013] ? find_held_lock+0x2c/0x110 [ 1713.923967] ? __fget_files+0x2f8/0x520 [ 1713.924885] ? __fget_light+0xea/0x290 [ 1713.925769] __sys_sendmsg+0xe5/0x1b0 [ 1713.926632] ? __sys_sendmsg_sock+0x40/0x40 [ 1713.927603] ? rcu_read_lock_any_held+0x75/0xa0 [ 1713.928646] ? fput_many+0x2f/0x1a0 [ 1713.929475] ? ksys_write+0x1a9/0x260 [ 1713.930339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.931530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.932702] do_syscall_64+0x33/0x40 [ 1713.933543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.934700] RIP: 0033:0x7fb9623a4b19 [ 1713.935536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.939673] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.941410] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1713.943010] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1713.944617] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.946230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.947845] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:55:47 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:55:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, 0x0, 0x408002, 0x0) 20:55:47 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0xf0ffffff7f0000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:55:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xff000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 20:55:47 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x73, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:47 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 3) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1728.291216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=9970 comm=syz-executor.0 20:55:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1728.313951] FAULT_INJECTION: forcing a failure. [ 1728.313951] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.316847] CPU: 0 PID: 9971 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1728.318502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.320499] Call Trace: [ 1728.321159] dump_stack+0x107/0x167 [ 1728.322040] should_fail.cold+0x5/0xa [ 1728.322967] ? __alloc_skb+0x6d/0x5b0 [ 1728.323893] should_failslab+0x5/0x20 [ 1728.324811] kmem_cache_alloc_node+0x55/0x330 [ 1728.325909] __alloc_skb+0x6d/0x5b0 20:55:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1728.326790] netlink_sendmsg+0x998/0xe00 [ 1728.327894] ? netlink_unicast+0x800/0x800 [ 1728.328941] ? netlink_unicast+0x800/0x800 [ 1728.329970] __sock_sendmsg+0x154/0x190 [ 1728.330917] ____sys_sendmsg+0x70d/0x870 [ 1728.331895] ? sock_write_iter+0x3d0/0x3d0 [ 1728.332899] ? do_recvmmsg+0x6d0/0x6d0 [ 1728.333847] ? lock_downgrade+0x6d0/0x6d0 [ 1728.334846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1728.336107] ___sys_sendmsg+0xf3/0x170 [ 1728.337036] ? sendmsg_copy_msghdr+0x160/0x160 [ 1728.338135] ? __fget_files+0x2cf/0x520 [ 1728.339071] ? lock_downgrade+0x6d0/0x6d0 [ 1728.340067] ? find_held_lock+0x2c/0x110 [ 1728.341061] ? __fget_files+0x2f8/0x520 [ 1728.342022] ? __fget_light+0xea/0x290 [ 1728.342955] __sys_sendmsg+0xe5/0x1b0 [ 1728.343857] ? __sys_sendmsg_sock+0x40/0x40 [ 1728.344891] ? rcu_read_lock_any_held+0x75/0xa0 [ 1728.346034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1728.347277] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1728.348505] do_syscall_64+0x33/0x40 [ 1728.349402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1728.350620] RIP: 0033:0x7fb9623a4b19 [ 1728.351513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.355949] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.357772] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1728.359493] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1728.361209] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.362919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.364632] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:55:47 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd02}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:55:47 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 4) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:55:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 1) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:55:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1728.491955] FAULT_INJECTION: forcing a failure. [ 1728.491955] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.493790] CPU: 1 PID: 9989 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1728.494738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.495884] Call Trace: [ 1728.496259] dump_stack+0x107/0x167 [ 1728.496777] should_fail.cold+0x5/0xa [ 1728.497330] should_failslab+0x5/0x20 [ 1728.497859] kmem_cache_alloc_bulk+0x4b/0x320 [ 1728.498503] io_submit_sqes+0x6fe6/0x8610 [ 1728.499095] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1728.499784] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1728.500453] ? find_held_lock+0x2c/0x110 [ 1728.501026] ? io_submit_sqes+0x8610/0x8610 [ 1728.501628] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1728.502294] ? wait_for_completion_io+0x270/0x270 [ 1728.502959] ? rcu_read_lock_any_held+0x75/0xa0 [ 1728.503610] ? vfs_write+0x354/0xb10 [ 1728.504129] ? fput_many+0x2f/0x1a0 [ 1728.504632] ? ksys_write+0x1a9/0x260 [ 1728.505164] ? __ia32_sys_read+0xb0/0xb0 [ 1728.505737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1728.506461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1728.507172] do_syscall_64+0x33/0x40 [ 1728.507687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1728.508391] RIP: 0033:0x7fdd5d6abb19 [ 1728.508905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.511438] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1728.512496] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1728.513489] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1728.514492] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.515471] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1728.516448] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:55:47 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x2000000000000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1728.535275] FAULT_INJECTION: forcing a failure. [ 1728.535275] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.538639] CPU: 0 PID: 9994 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1728.540289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1728.542294] Call Trace: [ 1728.542937] dump_stack+0x107/0x167 [ 1728.543812] should_fail.cold+0x5/0xa [ 1728.544722] ? create_object.isra.0+0x3a/0xa20 [ 1728.545818] should_failslab+0x5/0x20 [ 1728.546731] kmem_cache_alloc+0x5b/0x310 [ 1728.547716] create_object.isra.0+0x3a/0xa20 [ 1728.548768] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1728.550002] kmem_cache_alloc_node+0x169/0x330 [ 1728.551104] __alloc_skb+0x6d/0x5b0 [ 1728.551981] netlink_sendmsg+0x998/0xe00 [ 1728.552960] ? netlink_unicast+0x800/0x800 [ 1728.553994] ? netlink_unicast+0x800/0x800 [ 1728.554999] __sock_sendmsg+0x154/0x190 [ 1728.555942] ____sys_sendmsg+0x70d/0x870 [ 1728.556909] ? sock_write_iter+0x3d0/0x3d0 [ 1728.557939] ? do_recvmmsg+0x6d0/0x6d0 [ 1728.558887] ? lock_downgrade+0x6d0/0x6d0 [ 1728.559885] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1728.561164] ___sys_sendmsg+0xf3/0x170 [ 1728.562093] ? sendmsg_copy_msghdr+0x160/0x160 [ 1728.563173] ? __fget_files+0x2cf/0x520 [ 1728.564130] ? lock_downgrade+0x6d0/0x6d0 [ 1728.565150] ? find_held_lock+0x2c/0x110 [ 1728.566129] ? __fget_files+0x2f8/0x520 [ 1728.567094] ? __fget_light+0xea/0x290 [ 1728.568053] __sys_sendmsg+0xe5/0x1b0 [ 1728.568982] ? __sys_sendmsg_sock+0x40/0x40 [ 1728.570015] ? rcu_read_lock_any_held+0x75/0xa0 [ 1728.571173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1728.572431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1728.573695] do_syscall_64+0x33/0x40 [ 1728.574574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1728.575807] RIP: 0033:0x7fb9623a4b19 [ 1728.576707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.581128] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.582957] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1728.584690] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1728.586424] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.588141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.589858] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:55:48 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:00 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 5) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:00 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 20:56:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 2) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:56:00 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd08}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:00 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:00 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0xfaffffff00000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1740.780774] FAULT_INJECTION: forcing a failure. [ 1740.780774] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.782388] CPU: 0 PID: 10021 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1740.783279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.784344] Call Trace: [ 1740.784683] dump_stack+0x107/0x167 [ 1740.785156] should_fail.cold+0x5/0xa [ 1740.785645] should_failslab+0x5/0x20 [ 1740.786128] __kmalloc_node_track_caller+0x74/0x3b0 [ 1740.786767] ? netlink_sendmsg+0x998/0xe00 [ 1740.787313] __alloc_skb+0xb1/0x5b0 [ 1740.787780] netlink_sendmsg+0x998/0xe00 [ 1740.788301] ? netlink_unicast+0x800/0x800 [ 1740.788848] ? netlink_unicast+0x800/0x800 [ 1740.789406] __sock_sendmsg+0x154/0x190 [ 1740.789917] ____sys_sendmsg+0x70d/0x870 [ 1740.790436] ? sock_write_iter+0x3d0/0x3d0 [ 1740.790974] ? do_recvmmsg+0x6d0/0x6d0 [ 1740.791479] ? lock_downgrade+0x6d0/0x6d0 [ 1740.792010] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1740.792677] ___sys_sendmsg+0xf3/0x170 [ 1740.793185] ? sendmsg_copy_msghdr+0x160/0x160 [ 1740.793781] ? __fget_files+0x2cf/0x520 [ 1740.794289] ? lock_downgrade+0x6d0/0x6d0 [ 1740.794816] ? find_held_lock+0x2c/0x110 [ 1740.795336] ? __fget_files+0x2f8/0x520 [ 1740.795848] ? __fget_light+0xea/0x290 [ 1740.796352] __sys_sendmsg+0xe5/0x1b0 [ 1740.796839] ? __sys_sendmsg_sock+0x40/0x40 [ 1740.797386] ? rcu_read_lock_any_held+0x75/0xa0 [ 1740.797983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1740.798653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1740.799305] do_syscall_64+0x33/0x40 [ 1740.799772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1740.800416] RIP: 0033:0x7fb9623a4b19 [ 1740.800882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.803213] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1740.804175] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1740.805073] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1740.805974] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.806885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.807781] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 [ 1740.839794] FAULT_INJECTION: forcing a failure. [ 1740.839794] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.843178] CPU: 1 PID: 10024 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1740.844785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.846714] Call Trace: [ 1740.847335] dump_stack+0x107/0x167 [ 1740.848183] should_fail.cold+0x5/0xa [ 1740.849071] ? create_object.isra.0+0x3a/0xa20 [ 1740.850137] should_failslab+0x5/0x20 [ 1740.851014] kmem_cache_alloc+0x5b/0x310 [ 1740.851955] create_object.isra.0+0x3a/0xa20 [ 1740.852957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1740.854125] kmem_cache_alloc_bulk+0x168/0x320 [ 1740.855177] io_submit_sqes+0x6fe6/0x8610 [ 1740.856151] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1740.857293] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1740.858400] ? find_held_lock+0x2c/0x110 [ 1740.859331] ? io_submit_sqes+0x8610/0x8610 [ 1740.860320] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1740.861425] ? wait_for_completion_io+0x270/0x270 [ 1740.862527] ? rcu_read_lock_any_held+0x75/0xa0 [ 1740.863585] ? vfs_write+0x354/0xb10 [ 1740.864433] ? fput_many+0x2f/0x1a0 [ 1740.865273] ? ksys_write+0x1a9/0x260 [ 1740.866142] ? __ia32_sys_read+0xb0/0xb0 [ 1740.867070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1740.868265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1740.869448] do_syscall_64+0x33/0x40 [ 1740.870295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1740.871460] RIP: 0033:0x7fdd5d6abb19 [ 1740.872310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.876570] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1740.878326] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1740.880094] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1740.881727] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.883359] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1740.884984] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:56:00 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 6) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:00 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:00 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd11}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:00 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0xffffffff00000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:00 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 3) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1740.984397] FAULT_INJECTION: forcing a failure. [ 1740.984397] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.987315] CPU: 1 PID: 10044 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1740.989008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.990954] Call Trace: [ 1740.991550] dump_stack+0x107/0x167 [ 1740.992364] should_fail.cold+0x5/0xa [ 1740.993227] ? create_object.isra.0+0x3a/0xa20 [ 1740.994252] should_failslab+0x5/0x20 [ 1740.995104] kmem_cache_alloc+0x5b/0x310 [ 1740.996019] create_object.isra.0+0x3a/0xa20 [ 1740.996998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1740.998169] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1740.999326] ? netlink_sendmsg+0x998/0xe00 [ 1741.000297] __alloc_skb+0xb1/0x5b0 [ 1741.001146] netlink_sendmsg+0x998/0xe00 [ 1741.002073] ? netlink_unicast+0x800/0x800 [ 1741.003054] ? netlink_unicast+0x800/0x800 [ 1741.004027] __sock_sendmsg+0x154/0x190 [ 1741.004944] ____sys_sendmsg+0x70d/0x870 [ 1741.005881] ? sock_write_iter+0x3d0/0x3d0 [ 1741.006850] ? do_recvmmsg+0x6d0/0x6d0 [ 1741.007742] ? lock_downgrade+0x6d0/0x6d0 [ 1741.008701] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1741.009911] ___sys_sendmsg+0xf3/0x170 20:56:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 1) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1741.010804] ? sendmsg_copy_msghdr+0x160/0x160 [ 1741.011982] ? __fget_files+0x2cf/0x520 [ 1741.012898] ? lock_downgrade+0x6d0/0x6d0 [ 1741.013862] ? find_held_lock+0x2c/0x110 [ 1741.014808] ? __fget_files+0x2f8/0x520 [ 1741.015729] ? __fget_light+0xea/0x290 20:56:00 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1741.016635] __sys_sendmsg+0xe5/0x1b0 [ 1741.017608] ? __sys_sendmsg_sock+0x40/0x40 [ 1741.018603] ? rcu_read_lock_any_held+0x75/0xa0 [ 1741.019685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1741.020895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1741.022091] do_syscall_64+0x33/0x40 [ 1741.022943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1741.024113] RIP: 0033:0x7fb9623a4b19 [ 1741.024971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.029227] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 20:56:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1741.030991] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1741.032765] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1741.034371] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.036021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.037678] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 [ 1741.066984] FAULT_INJECTION: forcing a failure. [ 1741.066984] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.068447] CPU: 0 PID: 10052 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1741.069265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1741.070237] Call Trace: [ 1741.070550] dump_stack+0x107/0x167 [ 1741.070982] should_fail.cold+0x5/0xa [ 1741.071432] should_failslab+0x5/0x20 [ 1741.071880] kmem_cache_alloc_bulk+0x4b/0x320 [ 1741.072414] io_submit_sqes+0x6fe6/0x8610 [ 1741.072915] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1741.073510] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1741.074078] ? find_held_lock+0x2c/0x110 [ 1741.074557] ? io_submit_sqes+0x8610/0x8610 [ 1741.075064] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1741.075630] ? wait_for_completion_io+0x270/0x270 [ 1741.076195] ? rcu_read_lock_any_held+0x75/0xa0 [ 1741.076743] ? vfs_write+0x354/0xb10 [ 1741.077189] ? fput_many+0x2f/0x1a0 [ 1741.077617] ? ksys_write+0x1a9/0x260 [ 1741.078065] ? __ia32_sys_read+0xb0/0xb0 [ 1741.078547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1741.079162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1741.079765] do_syscall_64+0x33/0x40 [ 1741.080204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1741.080806] RIP: 0033:0x7f58d5fcbb19 [ 1741.081250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.083404] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1741.084298] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1741.085141] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1741.085976] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.086813] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1741.087649] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1741.109101] FAULT_INJECTION: forcing a failure. [ 1741.109101] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.112010] CPU: 1 PID: 10058 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1741.113626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1741.115561] Call Trace: [ 1741.116179] dump_stack+0x107/0x167 [ 1741.117031] should_fail.cold+0x5/0xa [ 1741.117930] ? create_object.isra.0+0x3a/0xa20 [ 1741.118990] should_failslab+0x5/0x20 [ 1741.119871] kmem_cache_alloc+0x5b/0x310 [ 1741.120817] create_object.isra.0+0x3a/0xa20 [ 1741.121850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1741.123026] kmem_cache_alloc_bulk+0x168/0x320 [ 1741.124086] io_submit_sqes+0x6fe6/0x8610 [ 1741.125074] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1741.126232] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1741.127353] ? find_held_lock+0x2c/0x110 [ 1741.128297] ? io_submit_sqes+0x8610/0x8610 [ 1741.129309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1741.130422] ? wait_for_completion_io+0x270/0x270 [ 1741.131540] ? rcu_read_lock_any_held+0x75/0xa0 [ 1741.132615] ? vfs_write+0x354/0xb10 [ 1741.133485] ? fput_many+0x2f/0x1a0 [ 1741.134329] ? ksys_write+0x1a9/0x260 [ 1741.135209] ? __ia32_sys_read+0xb0/0xb0 [ 1741.136153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1741.137373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1741.138567] do_syscall_64+0x33/0x40 [ 1741.139424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1741.140606] RIP: 0033:0x7fdd5d6abb19 [ 1741.141472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.145757] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1741.147534] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1741.149201] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1741.150862] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.152669] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1741.154349] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:56:12 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:12 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd3d}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:12 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:12 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:12 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 7) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1753.402047] FAULT_INJECTION: forcing a failure. [ 1753.402047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.403630] CPU: 0 PID: 10078 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1753.404451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.405500] Call Trace: [ 1753.405848] dump_stack+0x107/0x167 [ 1753.406302] should_fail.cold+0x5/0xa [ 1753.406766] _copy_from_iter_full+0x201/0xa60 [ 1753.407297] ? __virt_addr_valid+0x170/0x5d0 [ 1753.407815] ? __check_object_size+0x319/0x440 [ 1753.408359] netlink_sendmsg+0x879/0xe00 [ 1753.408835] ? netlink_unicast+0x800/0x800 [ 1753.409352] ? netlink_unicast+0x800/0x800 [ 1753.409853] __sock_sendmsg+0x154/0x190 [ 1753.410318] ____sys_sendmsg+0x70d/0x870 [ 1753.410796] ? sock_write_iter+0x3d0/0x3d0 [ 1753.411298] ? do_recvmmsg+0x6d0/0x6d0 [ 1753.411759] ? lock_downgrade+0x6d0/0x6d0 [ 1753.412251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1753.412869] ___sys_sendmsg+0xf3/0x170 [ 1753.413334] ? sendmsg_copy_msghdr+0x160/0x160 [ 1753.413871] ? __fget_files+0x2cf/0x520 [ 1753.414337] ? lock_downgrade+0x6d0/0x6d0 [ 1753.414826] ? find_held_lock+0x2c/0x110 20:56:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 4) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:56:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 2) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:12 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) r5 = fork() kcmp(r5, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11c4, 0x3, 0x0, 0x0, 0x0, 0x10000}, r5, 0x0, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x15) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1753.415321] ? __fget_files+0x2f8/0x520 [ 1753.415336] ? __fget_light+0xea/0x290 [ 1753.415350] __sys_sendmsg+0xe5/0x1b0 [ 1753.415361] ? __sys_sendmsg_sock+0x40/0x40 20:56:12 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 8) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1753.415371] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.415389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.415401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.415413] do_syscall_64+0x33/0x40 [ 1753.415423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.415430] RIP: 0033:0x7fb9623a4b19 [ 1753.415440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:56:12 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 3) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1753.415445] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1753.415457] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 20:56:12 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1753.415462] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1753.415468] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 20:56:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 5) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1753.415473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.415479] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:56:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xf, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 4) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1753.467197] FAULT_INJECTION: forcing a failure. [ 1753.467197] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.467211] CPU: 0 PID: 10083 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1753.467216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.467219] Call Trace: [ 1753.467236] dump_stack+0x107/0x167 [ 1753.467247] should_fail.cold+0x5/0xa [ 1753.467260] ? create_object.isra.0+0x3a/0xa20 [ 1753.467271] should_failslab+0x5/0x20 [ 1753.467281] kmem_cache_alloc+0x5b/0x310 20:56:13 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d", 0x5b}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1753.467295] create_object.isra.0+0x3a/0xa20 [ 1753.467303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.467316] kmem_cache_alloc_bulk+0x168/0x320 [ 1753.467330] io_submit_sqes+0x6fe6/0x8610 [ 1753.467355] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.467364] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.467378] ? find_held_lock+0x2c/0x110 [ 1753.467390] ? io_submit_sqes+0x8610/0x8610 [ 1753.467408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.467419] ? wait_for_completion_io+0x270/0x270 [ 1753.467431] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.467443] ? vfs_write+0x354/0xb10 [ 1753.467454] ? fput_many+0x2f/0x1a0 [ 1753.467464] ? ksys_write+0x1a9/0x260 [ 1753.467475] ? __ia32_sys_read+0xb0/0xb0 [ 1753.467487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.467498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.467510] do_syscall_64+0x33/0x40 [ 1753.467519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.467526] RIP: 0033:0x7f58d5fcbb19 [ 1753.467536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.467541] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.467553] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1753.467559] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1753.467564] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.467570] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1753.467575] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1753.480728] FAULT_INJECTION: forcing a failure. [ 1753.480728] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.480741] CPU: 0 PID: 10087 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1753.480746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.480749] Call Trace: [ 1753.480763] dump_stack+0x107/0x167 [ 1753.480774] should_fail.cold+0x5/0xa [ 1753.480785] ? create_object.isra.0+0x3a/0xa20 [ 1753.480797] should_failslab+0x5/0x20 [ 1753.480807] kmem_cache_alloc+0x5b/0x310 [ 1753.480817] ? mark_held_locks+0x9e/0xe0 [ 1753.480829] create_object.isra.0+0x3a/0xa20 [ 1753.480837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.480850] kmem_cache_alloc_bulk+0x168/0x320 [ 1753.480864] io_submit_sqes+0x6fe6/0x8610 [ 1753.480889] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.480898] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.480909] ? find_held_lock+0x2c/0x110 [ 1753.480922] ? io_submit_sqes+0x8610/0x8610 [ 1753.480935] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.480946] ? wait_for_completion_io+0x270/0x270 [ 1753.480958] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.480967] ? vfs_write+0x354/0xb10 [ 1753.480977] ? fput_many+0x2f/0x1a0 [ 1753.480987] ? ksys_write+0x1a9/0x260 [ 1753.480998] ? __ia32_sys_read+0xb0/0xb0 [ 1753.481010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.481020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.481032] do_syscall_64+0x33/0x40 [ 1753.481042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.481048] RIP: 0033:0x7fdd5d6abb19 [ 1753.481057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.481063] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.481074] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1753.481079] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1753.481084] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.481090] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1753.481096] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1753.562055] FAULT_INJECTION: forcing a failure. [ 1753.562055] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.562079] CPU: 1 PID: 10098 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1753.562090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.562096] Call Trace: [ 1753.562123] dump_stack+0x107/0x167 [ 1753.562147] should_fail.cold+0x5/0xa [ 1753.562169] ? __alloc_skb+0x6d/0x5b0 [ 1753.562193] should_failslab+0x5/0x20 [ 1753.562214] kmem_cache_alloc_node+0x55/0x330 [ 1753.562241] __alloc_skb+0x6d/0x5b0 [ 1753.562266] netlink_dump+0x729/0x1070 [ 1753.562292] ? __netlink_kernel_create+0x860/0x860 [ 1753.562325] ? lock_downgrade+0x6d0/0x6d0 [ 1753.562350] __netlink_dump_start+0x62e/0x8e0 [ 1753.562377] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1753.562393] ? do_set_master+0x230/0x230 [ 1753.562423] ? rtnl_fdb_dump+0xa30/0xa30 [ 1753.562442] ? do_set_master+0x230/0x230 [ 1753.562464] ? lock_acquire+0x197/0x470 [ 1753.562482] ? netlink_deliver_tap+0xf4/0xcc0 [ 1753.562508] netlink_rcv_skb+0x14b/0x430 [ 1753.562528] ? rtnl_fdb_dump+0xa30/0xa30 [ 1753.562549] ? netlink_ack+0xab0/0xab0 [ 1753.562565] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1753.562591] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1753.562610] ? is_vmalloc_addr+0x7b/0xb0 [ 1753.562635] netlink_unicast+0x54e/0x800 [ 1753.562661] ? netlink_attachskb+0x870/0x870 [ 1753.562692] netlink_sendmsg+0x90f/0xe00 [ 1753.562719] ? netlink_unicast+0x800/0x800 [ 1753.562750] ? netlink_unicast+0x800/0x800 [ 1753.562771] __sock_sendmsg+0x154/0x190 [ 1753.562792] ____sys_sendmsg+0x70d/0x870 [ 1753.562815] ? sock_write_iter+0x3d0/0x3d0 [ 1753.562834] ? do_recvmmsg+0x6d0/0x6d0 [ 1753.562859] ? lock_downgrade+0x6d0/0x6d0 [ 1753.562882] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1753.562910] ___sys_sendmsg+0xf3/0x170 [ 1753.562932] ? sendmsg_copy_msghdr+0x160/0x160 [ 1753.562957] ? __fget_files+0x2cf/0x520 [ 1753.562977] ? lock_downgrade+0x6d0/0x6d0 [ 1753.562998] ? find_held_lock+0x2c/0x110 [ 1753.563028] ? __fget_files+0x2f8/0x520 [ 1753.563057] ? __fget_light+0xea/0x290 [ 1753.563086] __sys_sendmsg+0xe5/0x1b0 [ 1753.563107] ? __sys_sendmsg_sock+0x40/0x40 [ 1753.563126] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.563165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.563186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.563209] do_syscall_64+0x33/0x40 [ 1753.563229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.563242] RIP: 0033:0x7fb9623a4b19 [ 1753.563260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.563271] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1753.563293] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1753.563304] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1753.563316] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.563327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.563339] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 [ 1753.566196] FAULT_INJECTION: forcing a failure. [ 1753.566196] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.566210] CPU: 0 PID: 10102 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1753.566215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.566219] Call Trace: [ 1753.566236] dump_stack+0x107/0x167 [ 1753.566248] should_fail.cold+0x5/0xa [ 1753.566265] ? create_object.isra.0+0x3a/0xa20 [ 1753.566277] should_failslab+0x5/0x20 [ 1753.566287] kmem_cache_alloc+0x5b/0x310 [ 1753.566299] ? mark_held_locks+0x9e/0xe0 [ 1753.566311] create_object.isra.0+0x3a/0xa20 [ 1753.566320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.566334] kmem_cache_alloc_bulk+0x168/0x320 [ 1753.566348] io_submit_sqes+0x6fe6/0x8610 [ 1753.566374] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.566383] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.566395] ? find_held_lock+0x2c/0x110 [ 1753.566408] ? io_submit_sqes+0x8610/0x8610 [ 1753.566422] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.566433] ? wait_for_completion_io+0x270/0x270 [ 1753.566446] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.566456] ? vfs_write+0x354/0xb10 [ 1753.566466] ? fput_many+0x2f/0x1a0 [ 1753.566476] ? ksys_write+0x1a9/0x260 [ 1753.566487] ? __ia32_sys_read+0xb0/0xb0 [ 1753.566499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.566510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.566523] do_syscall_64+0x33/0x40 [ 1753.566533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.566540] RIP: 0033:0x7f58d5fcbb19 [ 1753.566549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.566555] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.566567] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1753.566572] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1753.566578] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.566583] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1753.566589] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1753.662920] FAULT_INJECTION: forcing a failure. [ 1753.662920] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.662934] CPU: 0 PID: 10115 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1753.662940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.662943] Call Trace: [ 1753.662960] dump_stack+0x107/0x167 [ 1753.662971] should_fail.cold+0x5/0xa [ 1753.662983] ? create_object.isra.0+0x3a/0xa20 [ 1753.662995] should_failslab+0x5/0x20 [ 1753.663006] kmem_cache_alloc+0x5b/0x310 [ 1753.663017] ? mark_held_locks+0x9e/0xe0 [ 1753.663029] create_object.isra.0+0x3a/0xa20 [ 1753.663037] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.663050] kmem_cache_alloc_bulk+0x168/0x320 [ 1753.663065] io_submit_sqes+0x6fe6/0x8610 [ 1753.663090] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.663099] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.663110] ? find_held_lock+0x2c/0x110 [ 1753.663123] ? io_submit_sqes+0x8610/0x8610 [ 1753.663136] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.663147] ? wait_for_completion_io+0x270/0x270 [ 1753.663164] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.663173] ? vfs_write+0x354/0xb10 [ 1753.663183] ? fput_many+0x2f/0x1a0 [ 1753.663194] ? ksys_write+0x1a9/0x260 [ 1753.663204] ? __ia32_sys_read+0xb0/0xb0 [ 1753.663217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.663227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.663238] do_syscall_64+0x33/0x40 [ 1753.663248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.663255] RIP: 0033:0x7f58d5fcbb19 [ 1753.663265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.663271] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.663282] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1753.663288] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1753.663293] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.663299] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1753.663304] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1753.681372] FAULT_INJECTION: forcing a failure. [ 1753.681372] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.681396] CPU: 1 PID: 10116 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1753.681414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1753.681420] Call Trace: [ 1753.681450] dump_stack+0x107/0x167 [ 1753.681473] should_fail.cold+0x5/0xa [ 1753.681497] ? create_object.isra.0+0x3a/0xa20 [ 1753.681522] should_failslab+0x5/0x20 [ 1753.681543] kmem_cache_alloc+0x5b/0x310 [ 1753.681565] ? mark_held_locks+0x9e/0xe0 [ 1753.681589] create_object.isra.0+0x3a/0xa20 [ 1753.681607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1753.681633] kmem_cache_alloc_bulk+0x168/0x320 [ 1753.681664] io_submit_sqes+0x6fe6/0x8610 [ 1753.681715] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.681733] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1753.681756] ? find_held_lock+0x2c/0x110 [ 1753.681782] ? io_submit_sqes+0x8610/0x8610 [ 1753.681810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1753.681832] ? wait_for_completion_io+0x270/0x270 [ 1753.681856] ? rcu_read_lock_any_held+0x75/0xa0 [ 1753.681875] ? vfs_write+0x354/0xb10 [ 1753.681895] ? fput_many+0x2f/0x1a0 [ 1753.681916] ? ksys_write+0x1a9/0x260 [ 1753.681937] ? __ia32_sys_read+0xb0/0xb0 [ 1753.681962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1753.681984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.682007] do_syscall_64+0x33/0x40 [ 1753.682028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1753.682040] RIP: 0033:0x7fdd5d6abb19 [ 1753.682059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.682070] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1753.682092] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1753.682103] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1753.682115] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1753.682126] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1753.682137] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:56:27 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 9) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:27 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x2}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:27 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:27 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d", 0x5b}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 6) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:56:27 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140)=0x3fd, 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0xffff, 0x4, 0x8803, 0xffffffff, 0x32a}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 5) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1767.997090] FAULT_INJECTION: forcing a failure. [ 1767.997090] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.999832] CPU: 0 PID: 10139 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1768.001396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.003299] Call Trace: [ 1768.003894] dump_stack+0x107/0x167 [ 1768.004721] should_fail.cold+0x5/0xa [ 1768.005586] ? create_object.isra.0+0x3a/0xa20 [ 1768.006625] should_failslab+0x5/0x20 [ 1768.007485] kmem_cache_alloc+0x5b/0x310 [ 1768.008409] create_object.isra.0+0x3a/0xa20 [ 1768.009406] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1768.010581] kmem_cache_alloc_node+0x169/0x330 [ 1768.011628] __alloc_skb+0x6d/0x5b0 [ 1768.012454] netlink_dump+0x729/0x1070 [ 1768.013343] ? __netlink_kernel_create+0x860/0x860 [ 1768.014491] ? lock_downgrade+0x6d0/0x6d0 [ 1768.014948] FAULT_INJECTION: forcing a failure. [ 1768.014948] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.015440] __netlink_dump_start+0x62e/0x8e0 [ 1768.015467] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1768.015483] ? do_set_master+0x230/0x230 [ 1768.015504] ? rtnl_fdb_dump+0xa30/0xa30 [ 1768.015527] ? do_set_master+0x230/0x230 [ 1768.022094] ? lock_acquire+0x197/0x470 [ 1768.022991] ? netlink_deliver_tap+0xf4/0xcc0 [ 1768.024014] netlink_rcv_skb+0x14b/0x430 [ 1768.024926] ? rtnl_fdb_dump+0xa30/0xa30 [ 1768.025857] ? netlink_ack+0xab0/0xab0 [ 1768.026732] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1768.027774] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1768.028813] ? is_vmalloc_addr+0x7b/0xb0 [ 1768.029754] netlink_unicast+0x54e/0x800 [ 1768.030683] ? netlink_attachskb+0x870/0x870 [ 1768.031690] netlink_sendmsg+0x90f/0xe00 [ 1768.032621] ? netlink_unicast+0x800/0x800 [ 1768.033601] ? netlink_unicast+0x800/0x800 [ 1768.034555] __sock_sendmsg+0x154/0x190 [ 1768.035448] ____sys_sendmsg+0x70d/0x870 [ 1768.036398] ? sock_write_iter+0x3d0/0x3d0 [ 1768.037368] ? do_recvmmsg+0x6d0/0x6d0 [ 1768.038262] ? lock_downgrade+0x6d0/0x6d0 [ 1768.039203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1768.040394] ___sys_sendmsg+0xf3/0x170 [ 1768.041292] ? sendmsg_copy_msghdr+0x160/0x160 [ 1768.042334] ? __fget_files+0x2cf/0x520 [ 1768.043231] ? lock_downgrade+0x6d0/0x6d0 [ 1768.044166] ? find_held_lock+0x2c/0x110 [ 1768.045087] ? __fget_files+0x2f8/0x520 [ 1768.045997] ? __fget_light+0xea/0x290 [ 1768.046935] __sys_sendmsg+0xe5/0x1b0 [ 1768.047844] ? __sys_sendmsg_sock+0x40/0x40 [ 1768.048848] ? rcu_read_lock_any_held+0x75/0xa0 [ 1768.049985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.051174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1768.052417] do_syscall_64+0x33/0x40 [ 1768.053281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1768.054445] RIP: 0033:0x7fb9623a4b19 [ 1768.055318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.059542] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.061302] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1768.062974] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1768.064611] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.066300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.067950] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 [ 1768.069662] CPU: 1 PID: 10132 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1768.070899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.072300] Call Trace: [ 1768.072761] dump_stack+0x107/0x167 [ 1768.073388] should_fail.cold+0x5/0xa [ 1768.074169] ? create_object.isra.0+0x3a/0xa20 [ 1768.074959] should_failslab+0x5/0x20 [ 1768.075614] kmem_cache_alloc+0x5b/0x310 [ 1768.076317] ? mark_held_locks+0x9e/0xe0 [ 1768.077014] create_object.isra.0+0x3a/0xa20 [ 1768.077773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1768.078633] kmem_cache_alloc_bulk+0x168/0x320 [ 1768.079417] io_submit_sqes+0x6fe6/0x8610 [ 1768.080151] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1768.080995] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1768.081818] ? find_held_lock+0x2c/0x110 [ 1768.082513] ? io_submit_sqes+0x8610/0x8610 [ 1768.083253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1768.084067] ? wait_for_completion_io+0x270/0x270 [ 1768.084890] ? rcu_read_lock_any_held+0x75/0xa0 [ 1768.085676] ? vfs_write+0x354/0xb10 [ 1768.086312] ? fput_many+0x2f/0x1a0 [ 1768.086928] ? ksys_write+0x1a9/0x260 [ 1768.087568] ? __ia32_sys_read+0xb0/0xb0 [ 1768.088259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.089143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1768.090021] do_syscall_64+0x33/0x40 [ 1768.090649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1768.091506] RIP: 0033:0x7fdd5d6abb19 [ 1768.092140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.094716] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1768.095774] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1768.096759] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1768.097761] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.098748] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1768.099735] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1768.131984] FAULT_INJECTION: forcing a failure. [ 1768.131984] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.134905] CPU: 0 PID: 10145 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1768.136496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.138475] Call Trace: [ 1768.139086] dump_stack+0x107/0x167 [ 1768.139947] should_fail.cold+0x5/0xa [ 1768.140845] ? io_wq_create+0xeb/0xc00 [ 1768.141774] should_failslab+0x5/0x20 [ 1768.142654] __kmalloc+0x72/0x390 [ 1768.143484] io_wq_create+0xeb/0xc00 [ 1768.144372] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1768.145523] ? io_import_iovec+0x1120/0x1120 [ 1768.146565] ? io_apoll_task_func+0x2d0/0x2d0 [ 1768.147577] ? __io_req_find_next+0x300/0x300 [ 1768.148625] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1768.149735] __io_uring_add_tctx_node+0x2c6/0x520 [ 1768.150863] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1768.152064] __do_sys_io_uring_enter+0x146f/0x1890 [ 1768.153201] ? find_held_lock+0x2c/0x110 [ 1768.154147] ? io_submit_sqes+0x8610/0x8610 [ 1768.155148] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1768.156240] ? wait_for_completion_io+0x270/0x270 [ 1768.157383] ? rcu_read_lock_any_held+0x75/0xa0 [ 1768.158451] ? vfs_write+0x354/0xb10 [ 1768.159306] ? fput_many+0x2f/0x1a0 [ 1768.160129] ? ksys_write+0x1a9/0x260 [ 1768.161008] ? __ia32_sys_read+0xb0/0xb0 [ 1768.161964] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.163200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1768.164409] do_syscall_64+0x33/0x40 20:56:27 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 7) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1768.165275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1768.166684] RIP: 0033:0x7f58d5fcbb19 [ 1768.167551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.171777] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1768.173516] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1768.175128] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000005 [ 1768.176792] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.178462] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 20:56:27 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x16, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:27 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 10) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1768.180112] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1768.211078] FAULT_INJECTION: forcing a failure. [ 1768.211078] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.212913] CPU: 1 PID: 10161 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1768.213889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.215027] Call Trace: [ 1768.215396] dump_stack+0x107/0x167 [ 1768.215931] should_fail.cold+0x5/0xa [ 1768.216459] ? create_object.isra.0+0x3a/0xa20 [ 1768.217117] should_failslab+0x5/0x20 [ 1768.217673] kmem_cache_alloc+0x5b/0x310 [ 1768.218255] ? mark_held_locks+0x9e/0xe0 [ 1768.218841] create_object.isra.0+0x3a/0xa20 [ 1768.219469] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1768.220198] kmem_cache_alloc_bulk+0x168/0x320 [ 1768.220858] io_submit_sqes+0x6fe6/0x8610 [ 1768.221479] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1768.222191] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1768.222884] ? find_held_lock+0x2c/0x110 [ 1768.223469] ? io_submit_sqes+0x8610/0x8610 [ 1768.224094] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1768.224792] ? wait_for_completion_io+0x270/0x270 [ 1768.225496] ? rcu_read_lock_any_held+0x75/0xa0 [ 1768.226161] ? vfs_write+0x354/0xb10 [ 1768.226695] ? fput_many+0x2f/0x1a0 [ 1768.227220] ? ksys_write+0x1a9/0x260 [ 1768.227768] ? __ia32_sys_read+0xb0/0xb0 [ 1768.228353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.229107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1768.229859] do_syscall_64+0x33/0x40 [ 1768.230394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1768.231127] RIP: 0033:0x7fdd5d6abb19 [ 1768.231660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.234309] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1768.235416] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1768.236436] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1768.237466] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.238490] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1768.239509] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:56:27 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d", 0x5b}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:27 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file1\x00'}) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:27 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x3}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1768.408898] FAULT_INJECTION: forcing a failure. [ 1768.408898] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.411869] CPU: 0 PID: 10178 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1768.413499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.415456] Call Trace: [ 1768.416078] dump_stack+0x107/0x167 [ 1768.416932] should_fail.cold+0x5/0xa [ 1768.417846] should_failslab+0x5/0x20 [ 1768.418731] __kmalloc_node_track_caller+0x74/0x3b0 [ 1768.419891] ? netlink_dump+0x729/0x1070 [ 1768.420846] __alloc_skb+0xb1/0x5b0 [ 1768.421702] netlink_dump+0x729/0x1070 [ 1768.422609] ? __netlink_kernel_create+0x860/0x860 [ 1768.423764] ? lock_downgrade+0x6d0/0x6d0 [ 1768.424730] __netlink_dump_start+0x62e/0x8e0 [ 1768.425785] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1768.426760] ? do_set_master+0x230/0x230 [ 1768.427699] ? rtnl_fdb_dump+0xa30/0xa30 [ 1768.428640] ? do_set_master+0x230/0x230 [ 1768.429596] ? lock_acquire+0x197/0x470 [ 1768.430514] ? netlink_deliver_tap+0xf4/0xcc0 [ 1768.431558] netlink_rcv_skb+0x14b/0x430 [ 1768.432498] ? rtnl_fdb_dump+0xa30/0xa30 [ 1768.433443] ? netlink_ack+0xab0/0xab0 [ 1768.434350] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1768.435420] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1768.436479] ? is_vmalloc_addr+0x7b/0xb0 [ 1768.437425] netlink_unicast+0x54e/0x800 [ 1768.438376] ? netlink_attachskb+0x870/0x870 [ 1768.439403] netlink_sendmsg+0x90f/0xe00 [ 1768.440351] ? netlink_unicast+0x800/0x800 [ 1768.441342] ? netlink_unicast+0x800/0x800 [ 1768.442328] __sock_sendmsg+0x154/0x190 [ 1768.443246] ____sys_sendmsg+0x70d/0x870 [ 1768.444189] ? sock_write_iter+0x3d0/0x3d0 [ 1768.445163] ? do_recvmmsg+0x6d0/0x6d0 [ 1768.446073] ? lock_downgrade+0x6d0/0x6d0 [ 1768.447035] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1768.448253] ___sys_sendmsg+0xf3/0x170 [ 1768.449156] ? sendmsg_copy_msghdr+0x160/0x160 [ 1768.450224] ? __fget_files+0x2cf/0x520 [ 1768.451143] ? lock_downgrade+0x6d0/0x6d0 [ 1768.452100] ? find_held_lock+0x2c/0x110 [ 1768.453049] ? __fget_files+0x2f8/0x520 [ 1768.453982] ? __fget_light+0xea/0x290 [ 1768.454892] __sys_sendmsg+0xe5/0x1b0 [ 1768.455774] ? __sys_sendmsg_sock+0x40/0x40 [ 1768.456772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1768.457870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1768.459078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1768.460274] do_syscall_64+0x33/0x40 [ 1768.461133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1768.462322] RIP: 0033:0x7fb9623a4b19 [ 1768.463195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.467431] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.469188] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1768.470835] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1768.472471] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1768.474124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.475767] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:56:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec", 0x89}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:41 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xc0, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:41 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1781.757348] FAULT_INJECTION: forcing a failure. [ 1781.757348] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.758752] CPU: 1 PID: 10202 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1781.759526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.760459] Call Trace: [ 1781.760761] dump_stack+0x107/0x167 [ 1781.761172] should_fail.cold+0x5/0xa [ 1781.761614] should_failslab+0x5/0x20 [ 1781.762062] __kmalloc_node_track_caller+0x74/0x3b0 20:56:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 6) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 8) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:56:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 11) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:41 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x4}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1781.762818] ? netlink_dump+0x729/0x1070 [ 1781.763415] __alloc_skb+0xb1/0x5b0 [ 1781.763836] netlink_dump+0x729/0x1070 [ 1781.764277] ? __netlink_kernel_create+0x860/0x860 [ 1781.764850] ? lock_downgrade+0x6d0/0x6d0 [ 1781.765329] __netlink_dump_start+0x62e/0x8e0 [ 1781.765858] rtnetlink_rcv_msg+0x74e/0xbb0 [ 1781.766342] ? do_set_master+0x230/0x230 [ 1781.766808] ? rtnl_fdb_dump+0xa30/0xa30 [ 1781.767270] ? do_set_master+0x230/0x230 [ 1781.767737] ? lock_acquire+0x197/0x470 [ 1781.768195] ? netlink_deliver_tap+0xf4/0xcc0 [ 1781.768712] netlink_rcv_skb+0x14b/0x430 [ 1781.769165] ? rtnl_fdb_dump+0xa30/0xa30 [ 1781.769634] ? netlink_ack+0xab0/0xab0 [ 1781.770077] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1781.770596] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1781.771111] ? is_vmalloc_addr+0x7b/0xb0 [ 1781.771568] netlink_unicast+0x54e/0x800 [ 1781.772023] ? netlink_attachskb+0x870/0x870 [ 1781.772522] netlink_sendmsg+0x90f/0xe00 [ 1781.772983] ? netlink_unicast+0x800/0x800 [ 1781.773460] ? netlink_unicast+0x800/0x800 [ 1781.773940] __sock_sendmsg+0x154/0x190 [ 1781.774384] ____sys_sendmsg+0x70d/0x870 [ 1781.774841] ? sock_write_iter+0x3d0/0x3d0 [ 1781.775319] ? do_recvmmsg+0x6d0/0x6d0 [ 1781.775764] ? lock_downgrade+0x6d0/0x6d0 [ 1781.776228] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1781.776820] ___sys_sendmsg+0xf3/0x170 [ 1781.777256] ? sendmsg_copy_msghdr+0x160/0x160 [ 1781.777780] ? __fget_files+0x2cf/0x520 [ 1781.778223] ? lock_downgrade+0x6d0/0x6d0 [ 1781.778687] ? find_held_lock+0x2c/0x110 [ 1781.779150] ? __fget_files+0x2f8/0x520 [ 1781.779601] ? __fget_light+0xea/0x290 [ 1781.780046] __sys_sendmsg+0xe5/0x1b0 [ 1781.780473] ? __sys_sendmsg_sock+0x40/0x40 [ 1781.780958] ? rcu_read_lock_any_held+0x75/0xa0 [ 1781.781486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.782087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.782668] do_syscall_64+0x33/0x40 [ 1781.783085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.783672] RIP: 0033:0x7fb9623a4b19 [ 1781.784089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.786151] RSP: 002b:00007fb95f91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1781.787002] RAX: ffffffffffffffda RBX: 00007fb9624b7f60 RCX: 00007fb9623a4b19 [ 1781.787797] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1781.788593] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.789390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.790193] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:56:41 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xd9c, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1781.817192] FAULT_INJECTION: forcing a failure. [ 1781.817192] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.818964] CPU: 0 PID: 10201 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1781.819988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.821194] Call Trace: [ 1781.821589] dump_stack+0x107/0x167 [ 1781.822145] should_fail.cold+0x5/0xa [ 1781.822711] ? create_object.isra.0+0x3a/0xa20 [ 1781.822824] FAULT_INJECTION: forcing a failure. [ 1781.822824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.823392] should_failslab+0x5/0x20 [ 1781.823414] kmem_cache_alloc+0x5b/0x310 [ 1781.825884] ? mark_held_locks+0x9e/0xe0 [ 1781.826479] create_object.isra.0+0x3a/0xa20 [ 1781.827131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1781.827886] kmem_cache_alloc_bulk+0x168/0x320 [ 1781.828578] io_submit_sqes+0x6fe6/0x8610 [ 1781.829235] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1781.829997] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1781.830746] ? find_held_lock+0x2c/0x110 [ 1781.831361] ? io_submit_sqes+0x8610/0x8610 [ 1781.832031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1781.832784] ? wait_for_completion_io+0x270/0x270 [ 1781.833544] ? rcu_read_lock_any_held+0x75/0xa0 [ 1781.834278] ? vfs_write+0x354/0xb10 [ 1781.834852] ? fput_many+0x2f/0x1a0 [ 1781.835414] ? ksys_write+0x1a9/0x260 [ 1781.836002] ? __ia32_sys_read+0xb0/0xb0 [ 1781.836634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.837445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.838253] do_syscall_64+0x33/0x40 [ 1781.838832] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.839635] RIP: 0033:0x7f58d5fcbb19 [ 1781.840210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.843054] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1781.844230] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1781.845339] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1781.846452] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.847552] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1781.848650] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1781.849824] CPU: 1 PID: 10210 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 1781.850645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.851609] Call Trace: [ 1781.851924] dump_stack+0x107/0x167 [ 1781.852352] should_fail.cold+0x5/0xa [ 1781.852802] _copy_to_user+0x2e/0x180 [ 1781.853246] simple_read_from_buffer+0xcc/0x160 [ 1781.853796] proc_fail_nth_read+0x198/0x230 [ 1781.854300] ? proc_sessionid_read+0x230/0x230 [ 1781.854828] ? security_file_permission+0xb1/0xe0 [ 1781.855388] ? proc_sessionid_read+0x230/0x230 [ 1781.855916] vfs_read+0x228/0x620 [ 1781.856323] ksys_read+0x12d/0x260 [ 1781.856734] ? vfs_write+0xb10/0xb10 [ 1781.857165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.857780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.858376] do_syscall_64+0x33/0x40 [ 1781.858809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.859399] RIP: 0033:0x7fb96235769c [ 1781.859830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1781.861965] RSP: 002b:00007fb95f91a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1781.862848] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007fb96235769c [ 1781.863673] RDX: 000000000000000f RSI: 00007fb95f91a1e0 RDI: 0000000000000005 [ 1781.864492] RBP: 00007fb95f91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.865310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.866137] R13: 00007ffe08d349bf R14: 00007fb95f91a300 R15: 0000000000022000 20:56:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec", 0x89}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) (fail_nth: 12) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1781.881972] FAULT_INJECTION: forcing a failure. [ 1781.881972] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.883695] CPU: 0 PID: 10196 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1781.884765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.886061] Call Trace: [ 1781.886480] dump_stack+0x107/0x167 [ 1781.887042] should_fail.cold+0x5/0xa [ 1781.887632] ? io_wq_create+0x6ef/0xc00 [ 1781.888249] should_failslab+0x5/0x20 [ 1781.888840] kmem_cache_alloc_node_trace+0x59/0x340 [ 1781.889628] io_wq_create+0x6ef/0xc00 [ 1781.890230] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1781.891017] ? io_import_iovec+0x1120/0x1120 [ 1781.891699] ? io_apoll_task_func+0x2d0/0x2d0 [ 1781.892397] ? __io_req_find_next+0x300/0x300 [ 1781.893099] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1781.893875] __io_uring_add_tctx_node+0x2c6/0x520 [ 1781.894617] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1781.895438] __do_sys_io_uring_enter+0x146f/0x1890 [ 1781.896199] ? find_held_lock+0x2c/0x110 [ 1781.896834] ? io_submit_sqes+0x8610/0x8610 [ 1781.897511] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1781.898268] ? wait_for_completion_io+0x270/0x270 [ 1781.899014] ? rcu_read_lock_any_held+0x75/0xa0 [ 1781.899739] ? vfs_write+0x354/0xb10 [ 1781.900318] ? fput_many+0x2f/0x1a0 [ 1781.900882] ? ksys_write+0x1a9/0x260 [ 1781.901470] ? __ia32_sys_read+0xb0/0xb0 [ 1781.902116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1781.902928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1781.903728] do_syscall_64+0x33/0x40 [ 1781.904304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1781.905094] RIP: 0033:0x7fdd5d6abb19 [ 1781.905678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1781.908522] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1781.909703] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1781.910796] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1781.911892] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1781.912990] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1781.914097] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:56:41 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:41 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x5}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 7) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:41 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xdec, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec", 0x89}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:41 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1781.992231] FAULT_INJECTION: forcing a failure. [ 1781.992231] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.994172] CPU: 0 PID: 10229 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1781.995232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1781.996495] Call Trace: [ 1781.996904] dump_stack+0x107/0x167 [ 1781.997456] should_fail.cold+0x5/0xa [ 1781.998053] ? create_object.isra.0+0x3a/0xa20 [ 1781.998759] should_failslab+0x5/0x20 [ 1781.999344] kmem_cache_alloc+0x5b/0x310 [ 1781.999966] ? mark_held_locks+0x9e/0xe0 [ 1782.000592] create_object.isra.0+0x3a/0xa20 [ 1782.001258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1782.002043] kmem_cache_alloc_bulk+0x168/0x320 [ 1782.002748] io_submit_sqes+0x6fe6/0x8610 [ 1782.003399] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1782.004157] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1782.004892] ? find_held_lock+0x2c/0x110 [ 1782.005515] ? io_submit_sqes+0x8610/0x8610 [ 1782.006248] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1782.006983] ? wait_for_completion_io+0x270/0x270 [ 1782.007723] ? rcu_read_lock_any_held+0x75/0xa0 [ 1782.008430] ? vfs_write+0x354/0xb10 [ 1782.008995] ? fput_many+0x2f/0x1a0 [ 1782.009557] ? ksys_write+0x1a9/0x260 [ 1782.010152] ? __ia32_sys_read+0xb0/0xb0 [ 1782.010772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1782.011567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1782.012347] do_syscall_64+0x33/0x40 [ 1782.012937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1782.013726] RIP: 0033:0x7f58d5fcbb19 [ 1782.014295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1782.017083] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1782.018225] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1782.019339] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1782.020384] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.021419] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1782.022463] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:56:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:54 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x7883, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x1c2) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e3, &(0x7f0000000300)={0x0, 0x556d, 0x20, 0x0, 0x1b9, 0x0, r5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1400, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x17, 0x20, 0x6, 0x2, 0x0, 0x2, 0x820a, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0xf, @perf_config_ext={0x1f, 0x5}, 0x405, 0x1ff, 0x400, 0x8, 0xa2d6, 0x80000001, 0x40, 0x0, 0x5, 0x0, 0xd1}, 0x0, 0xf, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)="ee3f3e81aebf59be", 0x8, 0x200c0000}, 0x3) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 8) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:54 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275", 0xa0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:56:54 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe3c, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:56:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 9) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:56:54 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1794.779789] FAULT_INJECTION: forcing a failure. [ 1794.779789] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.781176] CPU: 0 PID: 10257 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1794.781979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1794.783005] Call Trace: [ 1794.783387] dump_stack+0x107/0x167 [ 1794.783829] should_fail.cold+0x5/0xa [ 1794.784290] ? create_object.isra.0+0x3a/0xa20 [ 1794.784833] should_failslab+0x5/0x20 [ 1794.785351] kmem_cache_alloc+0x5b/0x310 [ 1794.785852] ? mark_held_locks+0x9e/0xe0 [ 1794.786367] create_object.isra.0+0x3a/0xa20 [ 1794.786957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1794.787574] kmem_cache_alloc_bulk+0x168/0x320 [ 1794.788083] io_submit_sqes+0x6fe6/0x8610 [ 1794.788594] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.789249] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.789804] ? find_held_lock+0x2c/0x110 [ 1794.790336] ? io_submit_sqes+0x8610/0x8610 [ 1794.790834] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1794.791404] ? wait_for_completion_io+0x270/0x270 [ 1794.791960] ? rcu_read_lock_any_held+0x75/0xa0 [ 1794.792504] ? vfs_write+0x354/0xb10 [ 1794.792929] ? fput_many+0x2f/0x1a0 20:56:54 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1794.793347] ? ksys_write+0x1a9/0x260 [ 1794.793967] ? __ia32_sys_read+0xb0/0xb0 [ 1794.794444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1794.795058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1794.795665] do_syscall_64+0x33/0x40 20:56:54 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275", 0xa0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1794.796189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1794.796905] RIP: 0033:0x7f58d5fcbb19 [ 1794.797382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1794.799735] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1794.800760] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1794.801720] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1794.802611] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1794.803514] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1794.804348] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1794.815653] FAULT_INJECTION: forcing a failure. 20:56:54 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe88, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1794.815653] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.817314] CPU: 0 PID: 10254 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1794.818245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1794.819371] Call Trace: [ 1794.819721] dump_stack+0x107/0x167 [ 1794.820165] should_fail.cold+0x5/0xa [ 1794.820609] ? create_object.isra.0+0x3a/0xa20 [ 1794.821126] should_failslab+0x5/0x20 [ 1794.821562] kmem_cache_alloc+0x5b/0x310 [ 1794.822030] ? mark_held_locks+0x9e/0xe0 [ 1794.822497] create_object.isra.0+0x3a/0xa20 [ 1794.823022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1794.823621] kmem_cache_alloc_bulk+0x168/0x320 [ 1794.824148] io_submit_sqes+0x6fe6/0x8610 [ 1794.824706] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.825346] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.825919] ? find_held_lock+0x2c/0x110 [ 1794.826452] ? io_submit_sqes+0x8610/0x8610 [ 1794.827025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1794.827702] ? wait_for_completion_io+0x270/0x270 [ 1794.828353] ? rcu_read_lock_any_held+0x75/0xa0 [ 1794.828888] ? vfs_write+0x354/0xb10 [ 1794.829304] ? fput_many+0x2f/0x1a0 [ 1794.829730] ? ksys_write+0x1a9/0x260 [ 1794.830210] ? __ia32_sys_read+0xb0/0xb0 [ 1794.830686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1794.831249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1794.831842] do_syscall_64+0x33/0x40 [ 1794.832255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1794.832814] RIP: 0033:0x7fdd5d6abb19 [ 1794.833259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1794.835399] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1794.836270] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1794.837168] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1794.837977] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1794.838909] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1794.839745] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:56:54 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:56:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 9) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:54 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x209030, &(0x7f0000000040)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000200)=0x6) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x8) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:56:54 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 10) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1794.942254] FAULT_INJECTION: forcing a failure. [ 1794.942254] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.943688] CPU: 1 PID: 10283 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1794.944488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1794.944872] FAULT_INJECTION: forcing a failure. [ 1794.944872] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.945449] Call Trace: [ 1794.945467] dump_stack+0x107/0x167 [ 1794.945483] should_fail.cold+0x5/0xa [ 1794.948064] ? create_object.isra.0+0x3a/0xa20 [ 1794.948600] should_failslab+0x5/0x20 [ 1794.949043] kmem_cache_alloc+0x5b/0x310 [ 1794.949511] ? mark_held_locks+0x9e/0xe0 [ 1794.949994] create_object.isra.0+0x3a/0xa20 [ 1794.950507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1794.951085] kmem_cache_alloc_bulk+0x168/0x320 [ 1794.951624] io_submit_sqes+0x6fe6/0x8610 [ 1794.952122] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.952694] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.953251] ? find_held_lock+0x2c/0x110 [ 1794.953722] ? io_submit_sqes+0x8610/0x8610 [ 1794.954228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1794.954799] ? wait_for_completion_io+0x270/0x270 [ 1794.955357] ? rcu_read_lock_any_held+0x75/0xa0 [ 1794.955885] ? vfs_write+0x354/0xb10 [ 1794.956312] ? fput_many+0x2f/0x1a0 [ 1794.956733] ? ksys_write+0x1a9/0x260 [ 1794.957173] ? __ia32_sys_read+0xb0/0xb0 [ 1794.957646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1794.958263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1794.958869] do_syscall_64+0x33/0x40 [ 1794.959299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1794.959899] RIP: 0033:0x7fdd5d6abb19 [ 1794.960339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1794.962488] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1794.963384] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1794.964209] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1794.965042] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1794.965892] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1794.966718] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1794.967564] CPU: 0 PID: 10286 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1794.968391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1794.969461] Call Trace: [ 1794.969786] dump_stack+0x107/0x167 [ 1794.970227] should_fail.cold+0x5/0xa [ 1794.970666] ? create_object.isra.0+0x3a/0xa20 [ 1794.971192] should_failslab+0x5/0x20 [ 1794.971632] kmem_cache_alloc+0x5b/0x310 [ 1794.972111] ? mark_held_locks+0x9e/0xe0 [ 1794.972576] create_object.isra.0+0x3a/0xa20 [ 1794.973092] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1794.973675] kmem_cache_alloc_bulk+0x168/0x320 [ 1794.974210] io_submit_sqes+0x6fe6/0x8610 [ 1794.974695] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.975262] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1794.975778] ? find_held_lock+0x2c/0x110 [ 1794.976239] ? io_submit_sqes+0x8610/0x8610 [ 1794.976738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1794.977289] ? wait_for_completion_io+0x270/0x270 [ 1794.977851] ? rcu_read_lock_any_held+0x75/0xa0 [ 1794.978390] ? vfs_write+0x354/0xb10 [ 1794.978811] ? fput_many+0x2f/0x1a0 [ 1794.979214] ? ksys_write+0x1a9/0x260 [ 1794.979649] ? __ia32_sys_read+0xb0/0xb0 [ 1794.980120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1794.980726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1794.981322] do_syscall_64+0x33/0x40 [ 1794.981735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1794.982297] RIP: 0033:0x7f58d5fcbb19 [ 1794.982722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1794.984818] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1794.985691] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1794.986512] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1794.987315] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1794.988104] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1794.988915] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:57:07 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275", 0xa0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 10) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:07 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:07 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xec0, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:07 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x1c9}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:07 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x3ad, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) get_mempolicy(&(0x7f0000000040), &(0x7f00000001c0), 0x200, &(0x7f0000ffc000/0x4000)=nil, 0x3) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0xc080}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 11) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1808.385169] FAULT_INJECTION: forcing a failure. [ 1808.385169] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.386706] CPU: 1 PID: 10314 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1808.387496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.388443] Call Trace: [ 1808.388751] dump_stack+0x107/0x167 [ 1808.388822] FAULT_INJECTION: forcing a failure. [ 1808.388822] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.389169] should_fail.cold+0x5/0xa [ 1808.389184] should_failslab+0x5/0x20 [ 1808.389195] kmem_cache_alloc_bulk+0x4b/0x320 [ 1808.389217] io_submit_sqes+0x6fe6/0x8610 [ 1808.393870] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.394450] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.395008] ? find_held_lock+0x2c/0x110 [ 1808.395474] ? io_submit_sqes+0x8610/0x8610 [ 1808.395976] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1808.396525] ? wait_for_completion_io+0x270/0x270 [ 1808.397082] ? rcu_read_lock_any_held+0x75/0xa0 [ 1808.397616] ? vfs_write+0x354/0xb10 [ 1808.398048] ? fput_many+0x2f/0x1a0 [ 1808.398470] ? ksys_write+0x1a9/0x260 [ 1808.398907] ? __ia32_sys_read+0xb0/0xb0 [ 1808.399372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.399984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.400575] do_syscall_64+0x33/0x40 [ 1808.401002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1808.401594] RIP: 0033:0x7f58d5fcbb19 [ 1808.402026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.404110] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1808.404982] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1808.405788] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1808.406601] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.407412] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1808.408222] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1808.409049] CPU: 0 PID: 10300 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1808.410657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.412537] Call Trace: [ 1808.413137] dump_stack+0x107/0x167 [ 1808.413971] should_fail.cold+0x5/0xa [ 1808.414835] ? create_object.isra.0+0x3a/0xa20 [ 1808.415872] should_failslab+0x5/0x20 [ 1808.416731] kmem_cache_alloc+0x5b/0x310 [ 1808.417651] create_object.isra.0+0x3a/0xa20 [ 1808.418650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1808.419794] kmem_cache_alloc_bulk+0x168/0x320 [ 1808.420837] io_submit_sqes+0x6fe6/0x8610 [ 1808.421801] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.422940] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.424030] ? find_held_lock+0x2c/0x110 [ 1808.424951] ? io_submit_sqes+0x8610/0x8610 [ 1808.425941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1808.427032] ? wait_for_completion_io+0x270/0x270 [ 1808.428118] ? rcu_read_lock_any_held+0x75/0xa0 [ 1808.429157] ? vfs_write+0x354/0xb10 [ 1808.430001] ? fput_many+0x2f/0x1a0 [ 1808.430827] ? ksys_write+0x1a9/0x260 [ 1808.431680] ? __ia32_sys_read+0xb0/0xb0 [ 1808.432596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.433779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.434950] do_syscall_64+0x33/0x40 [ 1808.435793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1808.436941] RIP: 0033:0x7fdd5d6abb19 [ 1808.437777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.441938] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1808.443653] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1808.445267] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1808.446877] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.448487] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1808.450114] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:57:07 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:07 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x33fe0, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 11) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:07 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:07 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x300}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:07 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 12) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:57:07 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1808.576017] FAULT_INJECTION: forcing a failure. [ 1808.576017] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.578754] CPU: 0 PID: 10337 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1808.580345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.582213] Call Trace: [ 1808.582826] dump_stack+0x107/0x167 [ 1808.583680] should_fail.cold+0x5/0xa [ 1808.584565] ? create_object.isra.0+0x3a/0xa20 [ 1808.585617] should_failslab+0x5/0x20 [ 1808.586526] kmem_cache_alloc+0x5b/0x310 [ 1808.587542] create_object.isra.0+0x3a/0xa20 [ 1808.588786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1808.589220] FAULT_INJECTION: forcing a failure. [ 1808.589220] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.590205] kmem_cache_alloc_bulk+0x168/0x320 [ 1808.590246] io_submit_sqes+0x6fe6/0x8610 [ 1808.593787] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.594954] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.596058] ? find_held_lock+0x2c/0x110 [ 1808.596992] ? io_submit_sqes+0x8610/0x8610 [ 1808.598016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1808.599119] ? wait_for_completion_io+0x270/0x270 [ 1808.600227] ? rcu_read_lock_any_held+0x75/0xa0 [ 1808.601306] ? vfs_write+0x354/0xb10 [ 1808.602173] ? fput_many+0x2f/0x1a0 [ 1808.603029] ? ksys_write+0x1a9/0x260 [ 1808.603911] ? __ia32_sys_read+0xb0/0xb0 [ 1808.604844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.606070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.607267] do_syscall_64+0x33/0x40 [ 1808.608135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1808.609316] RIP: 0033:0x7f58d5fcbb19 [ 1808.610185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.614406] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1808.616151] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1808.617814] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1808.619452] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.621080] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1808.622746] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1808.624410] CPU: 1 PID: 10347 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1808.625210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1808.626168] Call Trace: [ 1808.626473] dump_stack+0x107/0x167 [ 1808.626888] should_fail.cold+0x5/0xa [ 1808.627322] ? create_object.isra.0+0x3a/0xa20 [ 1808.627845] should_failslab+0x5/0x20 [ 1808.628280] kmem_cache_alloc+0x5b/0x310 [ 1808.628745] create_object.isra.0+0x3a/0xa20 [ 1808.629244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1808.629820] kmem_cache_alloc_bulk+0x168/0x320 [ 1808.630349] io_submit_sqes+0x6fe6/0x8610 [ 1808.630835] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.631399] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1808.631947] ? find_held_lock+0x2c/0x110 [ 1808.632414] ? io_submit_sqes+0x8610/0x8610 [ 1808.632906] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1808.633456] ? wait_for_completion_io+0x270/0x270 [ 1808.634012] ? rcu_read_lock_any_held+0x75/0xa0 [ 1808.634539] ? vfs_write+0x354/0xb10 [ 1808.634966] ? fput_many+0x2f/0x1a0 [ 1808.635379] ? ksys_write+0x1a9/0x260 [ 1808.635813] ? __ia32_sys_read+0xb0/0xb0 [ 1808.636276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1808.636873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1808.637458] do_syscall_64+0x33/0x40 [ 1808.637886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1808.638471] RIP: 0033:0x7fdd5d6abb19 [ 1808.638895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1808.640977] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1808.641839] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1808.642653] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1808.643463] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.644274] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1808.645088] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:57:21 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20000054, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:21 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x500}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:21 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000380)="0c70308620fcf24a7fd5e9248026b311534934baa1ff64f9dc3803c4d7a6173369d6111348f3bd2fe28106eb60e6b730784173d6d5e60143d63b58cbe6a4fb7d692599480a6cee0b0bb21b2c796e5e71de5f27e1add18b8cf1826179e8f2a5482fbc4365cd322a9619b780e88050b5396093b50323b07734d89c3114b385da8e07ea172c0ad0237cf06f6bd818f556a699f1c285d999d7b00f367140cf46da3cb3d00dd06ee7fddc37b189ada8ee93fa38330f3c8c7ddacb1666fcdeb6153076272f85952920d1d2279507d3954592828c", 0xd1}, 0x5) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 12) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:21 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 13) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1822.334163] FAULT_INJECTION: forcing a failure. [ 1822.334163] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.335978] FAULT_INJECTION: forcing a failure. [ 1822.335978] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.336818] CPU: 0 PID: 10374 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1822.340777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1822.342567] Call Trace: [ 1822.343131] dump_stack+0x107/0x167 [ 1822.343919] should_fail.cold+0x5/0xa [ 1822.344740] ? create_object.isra.0+0x3a/0xa20 [ 1822.345720] should_failslab+0x5/0x20 [ 1822.346541] kmem_cache_alloc+0x5b/0x310 [ 1822.347408] ? mark_held_locks+0x9e/0xe0 [ 1822.348278] create_object.isra.0+0x3a/0xa20 [ 1822.349217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1822.350318] kmem_cache_alloc_bulk+0x168/0x320 [ 1822.351306] io_submit_sqes+0x6fe6/0x8610 [ 1822.352224] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1822.353294] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1822.354343] ? find_held_lock+0x2c/0x110 [ 1822.355216] ? io_submit_sqes+0x8610/0x8610 [ 1822.356137] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1822.357156] ? wait_for_completion_io+0x270/0x270 [ 1822.358188] ? rcu_read_lock_any_held+0x75/0xa0 [ 1822.359176] ? vfs_write+0x354/0xb10 [ 1822.359963] ? fput_many+0x2f/0x1a0 [ 1822.360736] ? ksys_write+0x1a9/0x260 [ 1822.361542] ? __ia32_sys_read+0xb0/0xb0 [ 1822.362409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1822.363517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1822.364614] do_syscall_64+0x33/0x40 [ 1822.365399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1822.366490] RIP: 0033:0x7fdd5d6abb19 [ 1822.367281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1822.371195] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1822.372810] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1822.374337] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1822.375855] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1822.377369] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1822.378892] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1822.380495] CPU: 1 PID: 10378 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1822.382155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1822.384085] Call Trace: [ 1822.384674] dump_stack+0x107/0x167 [ 1822.385535] should_fail.cold+0x5/0xa [ 1822.386448] ? create_object.isra.0+0x3a/0xa20 [ 1822.387539] should_failslab+0x5/0x20 [ 1822.388386] kmem_cache_alloc+0x5b/0x310 [ 1822.389342] ? mark_held_locks+0x9e/0xe0 [ 1822.390317] create_object.isra.0+0x3a/0xa20 [ 1822.391360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1822.392571] kmem_cache_alloc_bulk+0x168/0x320 [ 1822.393587] io_submit_sqes+0x6fe6/0x8610 [ 1822.394607] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1822.395791] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1822.396878] ? find_held_lock+0x2c/0x110 [ 1822.397846] ? io_submit_sqes+0x8610/0x8610 [ 1822.398897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1822.400045] ? wait_for_completion_io+0x270/0x270 [ 1822.401193] ? rcu_read_lock_any_held+0x75/0xa0 [ 1822.402265] ? vfs_write+0x354/0xb10 [ 1822.403127] ? fput_many+0x2f/0x1a0 [ 1822.403990] ? ksys_write+0x1a9/0x260 [ 1822.404884] ? __ia32_sys_read+0xb0/0xb0 [ 1822.405799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1822.407061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1822.408301] do_syscall_64+0x33/0x40 [ 1822.409150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1822.410340] RIP: 0033:0x7f58d5fcbb19 [ 1822.411238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:57:21 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xec0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1822.415554] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1822.417507] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1822.419229] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1822.420847] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1822.422555] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1822.424203] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:57:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:21 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:21 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf00}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:21 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7ffff000, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:21 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) syz_io_uring_setup(0x6593, &(0x7f0000000300)={0x0, 0x748d, 0x8, 0x2, 0x259, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x13, r5, 0x10000000) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000000380)=@l2={0x1f, 0x8, @any, 0x1, 0x2}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x9) 20:57:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 14) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:57:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 13) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:22 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xfffffdef, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:22 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8100}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1822.655021] FAULT_INJECTION: forcing a failure. [ 1822.655021] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.657698] CPU: 1 PID: 10411 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1822.659227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1822.661043] Call Trace: [ 1822.661625] dump_stack+0x107/0x167 [ 1822.662445] should_fail.cold+0x5/0xa [ 1822.663288] ? create_object.isra.0+0x3a/0xa20 [ 1822.664305] should_failslab+0x5/0x20 [ 1822.665142] kmem_cache_alloc+0x5b/0x310 [ 1822.666031] ? mark_held_locks+0x9e/0xe0 [ 1822.666933] create_object.isra.0+0x3a/0xa20 [ 1822.667892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1822.669023] kmem_cache_alloc_bulk+0x168/0x320 [ 1822.670032] io_submit_sqes+0x6fe6/0x8610 [ 1822.670982] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1822.672085] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1822.673143] ? find_held_lock+0x2c/0x110 [ 1822.674042] ? io_submit_sqes+0x8610/0x8610 [ 1822.675007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1822.676074] ? wait_for_completion_io+0x270/0x270 [ 1822.677134] ? rcu_read_lock_any_held+0x75/0xa0 [ 1822.678162] ? vfs_write+0x354/0xb10 [ 1822.678988] ? fput_many+0x2f/0x1a0 [ 1822.679785] ? ksys_write+0x1a9/0x260 [ 1822.680617] ? __ia32_sys_read+0xb0/0xb0 [ 1822.681508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1822.682663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1822.683790] do_syscall_64+0x33/0x40 [ 1822.684597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1822.685704] RIP: 0033:0x7fdd5d6abb19 [ 1822.686517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1822.690519] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1822.692179] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1822.693725] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1822.695277] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1822.696830] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1822.698394] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1822.751332] FAULT_INJECTION: forcing a failure. [ 1822.751332] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.753716] CPU: 0 PID: 10413 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1822.754899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1822.756304] Call Trace: [ 1822.756750] dump_stack+0x107/0x167 [ 1822.757362] should_fail.cold+0x5/0xa [ 1822.758002] ? xas_alloc+0x336/0x440 [ 1822.758641] should_failslab+0x5/0x20 [ 1822.759277] kmem_cache_alloc+0x5b/0x310 [ 1822.759961] xas_alloc+0x336/0x440 [ 1822.760571] xas_create+0x34a/0x10d0 [ 1822.761203] ? kernel_text_address+0xf2/0x120 [ 1822.761965] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1822.762867] xas_store+0x8c/0x1c40 [ 1822.763482] __xa_store+0x164/0x2d0 [ 1822.764084] ? xa_delete_node+0x280/0x280 [ 1822.764783] ? trace_hardirqs_on+0x5b/0x180 [ 1822.765509] xa_store+0x31/0x50 [ 1822.766062] __io_uring_add_tctx_node+0x1cf/0x520 [ 1822.766878] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1822.767774] __do_sys_io_uring_enter+0x146f/0x1890 [ 1822.768596] ? find_held_lock+0x2c/0x110 [ 1822.769278] ? io_submit_sqes+0x8610/0x8610 [ 1822.770011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1822.770831] ? wait_for_completion_io+0x270/0x270 [ 1822.771640] ? rcu_read_lock_any_held+0x75/0xa0 [ 1822.772426] ? vfs_write+0x354/0xb10 [ 1822.773046] ? fput_many+0x2f/0x1a0 [ 1822.773650] ? ksys_write+0x1a9/0x260 [ 1822.774297] ? __ia32_sys_read+0xb0/0xb0 [ 1822.774976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1822.775846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1822.776700] do_syscall_64+0x33/0x40 [ 1822.777315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1822.778172] RIP: 0033:0x7f58d5fcbb19 [ 1822.778790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1822.781853] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1822.783130] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1822.784307] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000005 [ 1822.785508] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1822.786720] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1822.787897] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:57:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 14) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 15) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:57:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275", 0xa0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:35 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xc00e}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:35 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0xf, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:35 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x1010, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x5000) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1835.875379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=10448 comm=syz-executor.2 [ 1835.897300] FAULT_INJECTION: forcing a failure. [ 1835.897300] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.898976] CPU: 0 PID: 10437 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1835.899912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1835.900169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=10454 comm=syz-executor.2 [ 1835.900992] Call Trace: [ 1835.901014] dump_stack+0x107/0x167 [ 1835.901031] should_fail.cold+0x5/0xa [ 1835.901058] ? create_object.isra.0+0x3a/0xa20 [ 1835.904051] FAULT_INJECTION: forcing a failure. [ 1835.904051] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.906944] should_failslab+0x5/0x20 [ 1835.907437] kmem_cache_alloc+0x5b/0x310 [ 1835.907967] ? mark_held_locks+0x9e/0xe0 [ 1835.908497] create_object.isra.0+0x3a/0xa20 [ 1835.909064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1835.909727] kmem_cache_alloc_bulk+0x168/0x320 [ 1835.910329] io_submit_sqes+0x6fe6/0x8610 [ 1835.910885] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1835.911530] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1835.912156] ? find_held_lock+0x2c/0x110 [ 1835.912686] ? io_submit_sqes+0x8610/0x8610 [ 1835.913249] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1835.913872] ? wait_for_completion_io+0x270/0x270 [ 1835.914503] ? rcu_read_lock_any_held+0x75/0xa0 [ 1835.915098] ? vfs_write+0x354/0xb10 [ 1835.915579] ? fput_many+0x2f/0x1a0 [ 1835.916047] ? ksys_write+0x1a9/0x260 [ 1835.916538] ? __ia32_sys_read+0xb0/0xb0 [ 1835.917063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1835.917742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1835.918408] do_syscall_64+0x33/0x40 [ 1835.918890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1835.919547] RIP: 0033:0x7fdd5d6abb19 [ 1835.920021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1835.922367] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1835.923340] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1835.924253] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1835.925162] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1835.926068] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1835.926980] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1835.927911] CPU: 1 PID: 10449 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1835.929536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1835.931475] Call Trace: [ 1835.932094] dump_stack+0x107/0x167 [ 1835.932942] should_fail.cold+0x5/0xa [ 1835.933825] ? create_object.isra.0+0x3a/0xa20 [ 1835.934892] should_failslab+0x5/0x20 [ 1835.935773] kmem_cache_alloc+0x5b/0x310 [ 1835.936715] ? mark_held_locks+0x9e/0xe0 [ 1835.937663] create_object.isra.0+0x3a/0xa20 [ 1835.938681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1835.939855] kmem_cache_alloc_bulk+0x168/0x320 [ 1835.940915] io_submit_sqes+0x6fe6/0x8610 [ 1835.941896] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1835.943052] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1835.944165] ? find_held_lock+0x2c/0x110 [ 1835.945101] ? io_submit_sqes+0x8610/0x8610 [ 1835.946097] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1835.947214] ? wait_for_completion_io+0x270/0x270 [ 1835.948341] ? rcu_read_lock_any_held+0x75/0xa0 [ 1835.949420] ? vfs_write+0x354/0xb10 [ 1835.950299] ? fput_many+0x2f/0x1a0 [ 1835.951103] ? ksys_write+0x1a9/0x260 [ 1835.951944] ? __ia32_sys_read+0xb0/0xb0 [ 1835.952844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1835.954000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1835.955149] do_syscall_64+0x33/0x40 [ 1835.955970] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1835.957101] RIP: 0033:0x7f58d5fcbb19 [ 1835.957920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1835.961995] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1835.963682] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1835.965256] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1835.966832] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1835.968400] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1835.969969] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:57:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x266, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275", 0xa0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:35 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xc901}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:35 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syncfs(r3) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:35 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x10, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:35 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:35 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xff00}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:49 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:49 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x34000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:49 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275", 0xa0}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 15) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 16) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:57:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x11, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:49 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) openat(r4, &(0x7f0000000040)='./file1\x00', 0x200100, 0x105) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:57:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x12, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1849.684302] FAULT_INJECTION: forcing a failure. [ 1849.684302] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.686235] FAULT_INJECTION: forcing a failure. [ 1849.686235] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.687288] CPU: 0 PID: 10497 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1849.690920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.692768] Call Trace: [ 1849.693359] dump_stack+0x107/0x167 [ 1849.694180] should_fail.cold+0x5/0xa [ 1849.695051] ? create_object.isra.0+0x3a/0xa20 [ 1849.696081] should_failslab+0x5/0x20 [ 1849.696935] kmem_cache_alloc+0x5b/0x310 [ 1849.697854] ? mark_held_locks+0x9e/0xe0 [ 1849.698777] create_object.isra.0+0x3a/0xa20 [ 1849.699762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1849.700912] kmem_cache_alloc_bulk+0x168/0x320 [ 1849.701936] io_submit_sqes+0x6fe6/0x8610 [ 1849.702936] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1849.704046] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1849.705164] ? find_held_lock+0x2c/0x110 [ 1849.706100] ? io_submit_sqes+0x8610/0x8610 [ 1849.707107] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.708214] ? wait_for_completion_io+0x270/0x270 [ 1849.709324] ? rcu_read_lock_any_held+0x75/0xa0 [ 1849.710406] ? vfs_write+0x354/0xb10 [ 1849.711270] ? fput_many+0x2f/0x1a0 [ 1849.712114] ? ksys_write+0x1a9/0x260 [ 1849.712998] ? __ia32_sys_read+0xb0/0xb0 [ 1849.713945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.715167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.716364] do_syscall_64+0x33/0x40 [ 1849.717226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.718416] RIP: 0033:0x7f58d5fcbb19 [ 1849.719278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.723550] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1849.725311] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1849.726958] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1849.728633] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.730293] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1849.731961] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1849.733658] CPU: 1 PID: 10496 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1849.735412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.737462] Call Trace: [ 1849.738120] dump_stack+0x107/0x167 [ 1849.739031] should_fail.cold+0x5/0xa [ 1849.739980] ? create_object.isra.0+0x3a/0xa20 [ 1849.741111] should_failslab+0x5/0x20 [ 1849.742052] kmem_cache_alloc+0x5b/0x310 [ 1849.743056] ? mark_held_locks+0x9e/0xe0 [ 1849.744054] create_object.isra.0+0x3a/0xa20 [ 1849.745125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1849.746371] kmem_cache_alloc_bulk+0x168/0x320 [ 1849.747512] io_submit_sqes+0x6fe6/0x8610 [ 1849.748561] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1849.749779] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1849.750988] ? find_held_lock+0x2c/0x110 [ 1849.751996] ? io_submit_sqes+0x8610/0x8610 [ 1849.753060] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.754238] ? wait_for_completion_io+0x270/0x270 [ 1849.755412] ? rcu_read_lock_any_held+0x75/0xa0 [ 1849.756532] ? vfs_write+0x354/0xb10 [ 1849.757433] ? fput_many+0x2f/0x1a0 [ 1849.758320] ? ksys_write+0x1a9/0x260 [ 1849.759248] ? __ia32_sys_read+0xb0/0xb0 [ 1849.760232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.761507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.762762] do_syscall_64+0x33/0x40 [ 1849.763660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.764908] RIP: 0033:0x7fdd5d6abb19 [ 1849.765807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.770219] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1849.772050] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1849.773753] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1849.775486] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.777210] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1849.778932] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:57:49 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:57:49 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x80000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:57:49 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 17) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:57:49 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b7150", 0xa6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:57:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x13, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1849.950846] FAULT_INJECTION: forcing a failure. [ 1849.950846] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.953860] CPU: 1 PID: 10528 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1849.955673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1849.957715] Call Trace: [ 1849.958340] dump_stack+0x107/0x167 [ 1849.959203] should_fail.cold+0x5/0xa [ 1849.960106] ? create_object.isra.0+0x3a/0xa20 [ 1849.961188] should_failslab+0x5/0x20 [ 1849.962095] kmem_cache_alloc+0x5b/0x310 [ 1849.963069] ? mark_held_locks+0x9e/0xe0 [ 1849.964023] create_object.isra.0+0x3a/0xa20 [ 1849.965064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1849.966252] kmem_cache_alloc_bulk+0x168/0x320 [ 1849.967322] io_submit_sqes+0x6fe6/0x8610 [ 1849.968327] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1849.969482] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1849.970611] ? find_held_lock+0x2c/0x110 [ 1849.971554] ? io_submit_sqes+0x8610/0x8610 [ 1849.972556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1849.973674] ? wait_for_completion_io+0x270/0x270 [ 1849.974797] ? rcu_read_lock_any_held+0x75/0xa0 [ 1849.975888] ? vfs_write+0x354/0xb10 [ 1849.976741] ? fput_many+0x2f/0x1a0 [ 1849.977576] ? ksys_write+0x1a9/0x260 [ 1849.978463] ? __ia32_sys_read+0xb0/0xb0 [ 1849.979395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1849.980590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1849.981780] do_syscall_64+0x33/0x40 [ 1849.982641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1849.983820] RIP: 0033:0x7fdd5d6abb19 [ 1849.984672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.988862] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1849.990593] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1849.992226] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1849.993847] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.995480] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1849.997115] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:58:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:03 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80c0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000b40)={{r5}, r6, 0x12, @unused=[0x1, 0x8000, 0x0, 0x80000000], @subvolid=0x3ff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000300)={"fbc7f6dc45706b789e163b994aaf0fa1", 0x0, r6, {0x2, 0x1000}, {0x7f, 0x7}, 0x6, [0xfffffffffffffff9, 0xf6ad, 0x0, 0x5, 0x13, 0x3f, 0x6, 0xfffffffffffffffa, 0x614f0d88, 0x10001, 0x2, 0x53, 0x0, 0x4, 0x4, 0x4]}) [ 1864.333401] FAULT_INJECTION: forcing a failure. [ 1864.333401] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.335208] CPU: 1 PID: 10553 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1864.336095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.337165] Call Trace: [ 1864.337511] dump_stack+0x107/0x167 [ 1864.337981] should_fail.cold+0x5/0xa [ 1864.338475] ? create_object.isra.0+0x3a/0xa20 [ 1864.339072] should_failslab+0x5/0x20 [ 1864.339564] kmem_cache_alloc+0x5b/0x310 [ 1864.340087] ? mark_held_locks+0x9e/0xe0 [ 1864.340616] create_object.isra.0+0x3a/0xa20 [ 1864.341191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.341852] kmem_cache_alloc_bulk+0x168/0x320 [ 1864.342445] io_submit_sqes+0x6fe6/0x8610 [ 1864.342997] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1864.343633] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1864.344251] ? find_held_lock+0x2c/0x110 [ 1864.344780] ? io_submit_sqes+0x8610/0x8610 [ 1864.345336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.346182] ? wait_for_completion_io+0x270/0x270 [ 1864.346987] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.347761] ? vfs_write+0x354/0xb10 [ 1864.348236] ? fput_many+0x2f/0x1a0 [ 1864.348708] ? ksys_write+0x1a9/0x260 [ 1864.349191] ? __ia32_sys_read+0xb0/0xb0 [ 1864.349710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.350382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.351059] do_syscall_64+0x33/0x40 [ 1864.351535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.352184] RIP: 0033:0x7fdd5d6abb19 [ 1864.352665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.355013] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1864.355989] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1864.356905] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1864.357807] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.358716] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1864.359615] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:58:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b7150", 0xa6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:03 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x400300}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 16) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x14, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 18) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1864.396197] FAULT_INJECTION: forcing a failure. [ 1864.396197] name failslab, interval 1, probability 0, space 0, times 0 20:58:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x15, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1864.399092] CPU: 0 PID: 10561 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1864.400856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.402792] Call Trace: [ 1864.403402] dump_stack+0x107/0x167 [ 1864.404246] should_fail.cold+0x5/0xa [ 1864.405133] ? create_object.isra.0+0x3a/0xa20 [ 1864.406183] should_failslab+0x5/0x20 [ 1864.407071] kmem_cache_alloc+0x5b/0x310 [ 1864.408007] ? mark_held_locks+0x9e/0xe0 [ 1864.408941] create_object.isra.0+0x3a/0xa20 [ 1864.409950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.411132] kmem_cache_alloc_bulk+0x168/0x320 [ 1864.412187] io_submit_sqes+0x6fe6/0x8610 [ 1864.413172] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1864.414315] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1864.415431] ? find_held_lock+0x2c/0x110 [ 1864.416367] ? io_submit_sqes+0x8610/0x8610 [ 1864.417367] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.418486] ? wait_for_completion_io+0x270/0x270 20:58:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 19) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1864.419610] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.420771] ? vfs_write+0x354/0xb10 [ 1864.421628] ? fput_many+0x2f/0x1a0 [ 1864.422465] ? ksys_write+0x1a9/0x260 [ 1864.423354] ? __ia32_sys_read+0xb0/0xb0 [ 1864.424293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.425497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.426695] do_syscall_64+0x33/0x40 [ 1864.427552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.428737] RIP: 0033:0x7f58d5fcbb19 [ 1864.429598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.433858] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1864.435616] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1864.437265] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1864.438920] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.440569] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1864.442208] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:58:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x73, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1864.462840] FAULT_INJECTION: forcing a failure. [ 1864.462840] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.464383] CPU: 1 PID: 10572 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1864.465201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.466170] Call Trace: [ 1864.466485] dump_stack+0x107/0x167 [ 1864.466924] should_fail.cold+0x5/0xa [ 1864.467375] ? create_object.isra.0+0x3a/0xa20 [ 1864.467915] should_failslab+0x5/0x20 [ 1864.468366] kmem_cache_alloc+0x5b/0x310 [ 1864.468845] ? mark_held_locks+0x9e/0xe0 [ 1864.469322] create_object.isra.0+0x3a/0xa20 [ 1864.469838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.470439] kmem_cache_alloc_bulk+0x168/0x320 [ 1864.470988] io_submit_sqes+0x6fe6/0x8610 [ 1864.471494] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1864.472079] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1864.472650] ? find_held_lock+0x2c/0x110 [ 1864.473129] ? io_submit_sqes+0x8610/0x8610 [ 1864.473637] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1864.474205] ? wait_for_completion_io+0x270/0x270 [ 1864.474781] ? rcu_read_lock_any_held+0x75/0xa0 [ 1864.475324] ? vfs_write+0x354/0xb10 [ 1864.475763] ? fput_many+0x2f/0x1a0 [ 1864.476189] ? ksys_write+0x1a9/0x260 [ 1864.476632] ? __ia32_sys_read+0xb0/0xb0 [ 1864.477107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1864.477721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1864.478328] do_syscall_64+0x33/0x40 [ 1864.478770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1864.479365] RIP: 0033:0x7fdd5d6abb19 [ 1864.479802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.481942] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1864.482834] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1864.483665] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1864.484502] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.485327] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1864.486150] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:58:03 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0ffff}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1864.494637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=10575 comm=syz-executor.2 [ 1864.501682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=10576 comm=syz-executor.2 20:58:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b7150", 0xa6}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:03 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x20010, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) sendfile(0xffffffffffffffff, r5, &(0x7f0000000140)=0x3fd, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:03 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd02}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:16 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:16 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x1000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eb", 0xa9}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 20) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:58:16 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd08}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:16 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x6602, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:16 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 17) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:16 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eb", 0xa9}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:16 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x2000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:16 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd11}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1877.602788] FAULT_INJECTION: forcing a failure. [ 1877.602788] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.605609] CPU: 1 PID: 10618 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1877.607212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.609117] Call Trace: [ 1877.609735] dump_stack+0x107/0x167 [ 1877.610569] should_fail.cold+0x5/0xa [ 1877.611445] ? create_object.isra.0+0x3a/0xa20 [ 1877.612494] should_failslab+0x5/0x20 [ 1877.613357] kmem_cache_alloc+0x5b/0x310 [ 1877.614293] create_object.isra.0+0x3a/0xa20 [ 1877.615303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1877.616459] kmem_cache_alloc_bulk+0x168/0x320 [ 1877.617503] io_submit_sqes+0x6fe6/0x8610 [ 1877.618484] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1877.619622] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1877.620721] ? find_held_lock+0x2c/0x110 [ 1877.621646] ? io_submit_sqes+0x8610/0x8610 [ 1877.622635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1877.623738] ? wait_for_completion_io+0x270/0x270 [ 1877.624837] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.625895] ? vfs_write+0x354/0xb10 [ 1877.626746] ? fput_many+0x2f/0x1a0 [ 1877.627569] ? ksys_write+0x1a9/0x260 [ 1877.628436] ? __ia32_sys_read+0xb0/0xb0 [ 1877.629366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.630553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.631723] do_syscall_64+0x33/0x40 [ 1877.632562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.633708] RIP: 0033:0x7fdd5d6abb19 [ 1877.634555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.638735] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1877.640471] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1877.642086] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1877.643710] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.645318] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1877.646936] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1877.651337] FAULT_INJECTION: forcing a failure. [ 1877.651337] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.653950] CPU: 1 PID: 10613 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1877.655517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1877.657380] Call Trace: [ 1877.657972] dump_stack+0x107/0x167 [ 1877.658804] should_fail.cold+0x5/0xa [ 1877.659660] ? create_object.isra.0+0x3a/0xa20 [ 1877.660689] should_failslab+0x5/0x20 [ 1877.661544] kmem_cache_alloc+0x5b/0x310 [ 1877.662457] ? mark_held_locks+0x9e/0xe0 [ 1877.663380] create_object.isra.0+0x3a/0xa20 [ 1877.664375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1877.665536] kmem_cache_alloc_bulk+0x168/0x320 [ 1877.666573] io_submit_sqes+0x6fe6/0x8610 [ 1877.667547] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1877.668693] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1877.669797] ? find_held_lock+0x2c/0x110 [ 1877.670715] ? io_submit_sqes+0x8610/0x8610 [ 1877.671718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1877.672814] ? wait_for_completion_io+0x270/0x270 [ 1877.673905] ? rcu_read_lock_any_held+0x75/0xa0 [ 1877.674961] ? vfs_write+0x354/0xb10 [ 1877.675795] ? fput_many+0x2f/0x1a0 [ 1877.676622] ? ksys_write+0x1a9/0x260 [ 1877.677486] ? __ia32_sys_read+0xb0/0xb0 [ 1877.678403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1877.679590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1877.680765] do_syscall_64+0x33/0x40 [ 1877.681613] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1877.682774] RIP: 0033:0x7f58d5fcbb19 [ 1877.683607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1877.687765] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1877.689498] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1877.691125] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1877.692751] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1877.694366] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1877.695993] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:58:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, 0x0, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd3d}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 18) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eb", 0xa9}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:31 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x3000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 21) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:58:31 executing program 6: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x8, 0x2, 0x5, 0x0, 0x0, 0x1, 0x108, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0xcf6}, 0x40, 0x2, 0x2, 0x1, 0x8, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, r5, 0x1) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba1", 0xaa}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1892.114324] FAULT_INJECTION: forcing a failure. [ 1892.114324] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.116116] CPU: 1 PID: 10660 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1892.117098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.118276] Call Trace: [ 1892.118664] dump_stack+0x107/0x167 [ 1892.119210] should_fail.cold+0x5/0xa [ 1892.119749] ? create_object.isra.0+0x3a/0xa20 [ 1892.120405] should_failslab+0x5/0x20 [ 1892.120949] kmem_cache_alloc+0x5b/0x310 [ 1892.121541] ? mark_held_locks+0x9e/0xe0 [ 1892.122122] create_object.isra.0+0x3a/0xa20 [ 1892.122745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1892.123476] kmem_cache_alloc_bulk+0x168/0x320 [ 1892.124094] FAULT_INJECTION: forcing a failure. [ 1892.124094] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.124136] io_submit_sqes+0x6fe6/0x8610 [ 1892.127299] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1892.127988] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1892.128656] ? find_held_lock+0x2c/0x110 [ 1892.129228] ? io_submit_sqes+0x8610/0x8610 [ 1892.129846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1892.130515] ? wait_for_completion_io+0x270/0x270 [ 1892.131193] ? rcu_read_lock_any_held+0x75/0xa0 [ 1892.131837] ? vfs_write+0x354/0xb10 [ 1892.132353] ? fput_many+0x2f/0x1a0 [ 1892.132864] ? ksys_write+0x1a9/0x260 [ 1892.133396] ? __ia32_sys_read+0xb0/0xb0 [ 1892.133965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.134696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.135425] do_syscall_64+0x33/0x40 [ 1892.135948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1892.136657] RIP: 0033:0x7f58d5fcbb19 [ 1892.137175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.139734] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1892.140796] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1892.141798] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1892.142792] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.143788] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1892.144799] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1892.145827] CPU: 0 PID: 10662 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1892.147425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1892.149317] Call Trace: [ 1892.149922] dump_stack+0x107/0x167 [ 1892.150756] should_fail.cold+0x5/0xa [ 1892.151633] ? create_object.isra.0+0x3a/0xa20 [ 1892.152680] should_failslab+0x5/0x20 [ 1892.153547] kmem_cache_alloc+0x5b/0x310 [ 1892.154467] ? mark_held_locks+0x9e/0xe0 [ 1892.155399] create_object.isra.0+0x3a/0xa20 [ 1892.156390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1892.157545] kmem_cache_alloc_bulk+0x168/0x320 [ 1892.158591] io_submit_sqes+0x6fe6/0x8610 [ 1892.159559] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1892.160684] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1892.161773] ? find_held_lock+0x2c/0x110 [ 1892.162699] ? io_submit_sqes+0x8610/0x8610 [ 1892.163682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1892.164781] ? wait_for_completion_io+0x270/0x270 [ 1892.165882] ? rcu_read_lock_any_held+0x75/0xa0 [ 1892.166948] ? vfs_write+0x354/0xb10 [ 1892.167794] ? fput_many+0x2f/0x1a0 [ 1892.168629] ? ksys_write+0x1a9/0x260 20:58:31 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0xffff}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1892.169490] ? __ia32_sys_read+0xb0/0xb0 [ 1892.170588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1892.171788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1892.172970] do_syscall_64+0x33/0x40 [ 1892.173809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1892.174978] RIP: 0033:0x7fdd5d6abb19 [ 1892.175817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1892.179957] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1892.181676] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1892.183293] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1892.184909] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1892.186521] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1892.188141] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:58:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba1", 0xaa}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:31 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x4000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:31 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba1", 0xaa}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:46 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x5000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:46 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:46 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000300)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 22) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:58:47 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xff00, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x2}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, 0x0, 0x168, 0x20088080}, 0x11) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:58:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 19) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1907.641940] FAULT_INJECTION: forcing a failure. [ 1907.641940] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.644840] CPU: 0 PID: 10706 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1907.646442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.648374] Call Trace: [ 1907.648987] dump_stack+0x107/0x167 [ 1907.649831] should_fail.cold+0x5/0xa [ 1907.650722] should_failslab+0x5/0x20 [ 1907.651610] kmem_cache_alloc_bulk+0x4b/0x320 [ 1907.652649] io_submit_sqes+0x6fe6/0x8610 [ 1907.653632] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1907.654777] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1907.655898] ? find_held_lock+0x2c/0x110 [ 1907.656844] ? io_submit_sqes+0x8610/0x8610 [ 1907.657841] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.658950] ? wait_for_completion_io+0x270/0x270 [ 1907.660129] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.661199] ? vfs_write+0x354/0xb10 [ 1907.662056] ? fput_many+0x2f/0x1a0 [ 1907.662892] ? ksys_write+0x1a9/0x260 [ 1907.663774] ? __ia32_sys_read+0xb0/0xb0 [ 1907.664710] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.665912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.667108] do_syscall_64+0x33/0x40 [ 1907.667961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.669133] RIP: 0033:0x7f58d5fcbb19 [ 1907.669985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.674213] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.675975] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1907.677611] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1907.679253] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.680888] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1907.682523] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:58:47 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:58:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, 0x0, 0x168, 0x20088080}, 0x11) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1907.723056] FAULT_INJECTION: forcing a failure. [ 1907.723056] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.725947] CPU: 0 PID: 10717 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1907.727537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.729432] Call Trace: [ 1907.730050] dump_stack+0x107/0x167 [ 1907.730899] should_fail.cold+0x5/0xa [ 1907.731789] ? create_object.isra.0+0x3a/0xa20 [ 1907.732842] should_failslab+0x5/0x20 [ 1907.733718] kmem_cache_alloc+0x5b/0x310 [ 1907.734655] ? mark_held_locks+0x9e/0xe0 [ 1907.735604] create_object.isra.0+0x3a/0xa20 [ 1907.736608] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1907.737779] kmem_cache_alloc_bulk+0x168/0x320 [ 1907.738832] io_submit_sqes+0x6fe6/0x8610 [ 1907.739818] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1907.740958] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1907.742075] ? find_held_lock+0x2c/0x110 [ 1907.743011] ? io_submit_sqes+0x8610/0x8610 [ 1907.744023] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.745145] ? wait_for_completion_io+0x270/0x270 [ 1907.746257] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.747329] ? vfs_write+0x354/0xb10 [ 1907.748184] ? fput_many+0x2f/0x1a0 [ 1907.749025] ? ksys_write+0x1a9/0x260 [ 1907.749900] ? __ia32_sys_read+0xb0/0xb0 [ 1907.750838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.752049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.753234] do_syscall_64+0x33/0x40 [ 1907.754090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.755272] RIP: 0033:0x7fdd5d6abb19 [ 1907.756129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.760401] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.762153] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1907.763797] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1907.765433] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.767088] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1907.768744] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:58:47 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x3}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 20) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:58:47 executing program 6: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41010, 0x0, 0x0, 0x0, 0x1, 0x10000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="c835b8405cb8399268f2f89a666e9453", 0x10) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000300)=""/71, 0x47, 0x3) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x2000}, 0x4) 20:58:47 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x81000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1907.953158] FAULT_INJECTION: forcing a failure. [ 1907.953158] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1907.956326] CPU: 1 PID: 10744 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1907.957939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.959876] Call Trace: [ 1907.960492] dump_stack+0x107/0x167 [ 1907.961341] should_fail.cold+0x5/0xa [ 1907.962232] __alloc_pages_nodemask+0x182/0x600 [ 1907.963317] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1907.964716] alloc_pages_current+0x187/0x280 [ 1907.965731] allocate_slab+0x26f/0x380 [ 1907.966630] ___slab_alloc+0x470/0x700 [ 1907.967535] ? io_submit_sqes+0x6fe6/0x8610 [ 1907.968532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.969734] ? trace_hardirqs_on+0x5b/0x180 [ 1907.970737] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1907.971831] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1907.972896] io_submit_sqes+0x6fe6/0x8610 [ 1907.973890] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1907.975037] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1907.976157] ? find_held_lock+0x2c/0x110 [ 1907.977094] ? io_submit_sqes+0x8610/0x8610 [ 1907.978090] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.979208] ? wait_for_completion_io+0x270/0x270 [ 1907.980317] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.981382] ? vfs_write+0x354/0xb10 [ 1907.982237] ? fput_many+0x2f/0x1a0 [ 1907.983082] ? ksys_write+0x1a9/0x260 [ 1907.983962] ? __ia32_sys_read+0xb0/0xb0 [ 1907.984898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1907.986102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1907.987295] do_syscall_64+0x33/0x40 [ 1907.988151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1907.989329] RIP: 0033:0x7f58d5fcbb19 [ 1907.990182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.994417] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.996180] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1907.997818] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1907.999463] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1908.001101] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1908.002736] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:58:47 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:58:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, 0x0, 0x168, 0x20088080}, 0x11) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:01 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x9effffff}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:01 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x4}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 21) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:01 executing program 6: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x7579, 0x0, 0x2, 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=@random={'user.', '\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x90000005}) 20:59:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:01 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 23) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1922.170989] FAULT_INJECTION: forcing a failure. [ 1922.170989] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.172644] CPU: 1 PID: 10766 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1922.173514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.174553] Call Trace: [ 1922.174886] dump_stack+0x107/0x167 [ 1922.175355] should_fail.cold+0x5/0xa [ 1922.175835] ? create_object.isra.0+0x3a/0xa20 [ 1922.176411] should_failslab+0x5/0x20 [ 1922.176894] kmem_cache_alloc+0x5b/0x310 [ 1922.177411] ? mark_held_locks+0x9e/0xe0 [ 1922.177924] create_object.isra.0+0x3a/0xa20 [ 1922.178471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1922.179101] kmem_cache_alloc_bulk+0x168/0x320 [ 1922.179683] io_submit_sqes+0x6fe6/0x8610 [ 1922.180217] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.180842] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.181443] ? find_held_lock+0x2c/0x110 [ 1922.181953] ? io_submit_sqes+0x8610/0x8610 [ 1922.182497] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1922.183099] ? wait_for_completion_io+0x270/0x270 [ 1922.183709] ? rcu_read_lock_any_held+0x75/0xa0 [ 1922.184287] ? vfs_write+0x354/0xb10 [ 1922.184758] ? fput_many+0x2f/0x1a0 [ 1922.185213] ? ksys_write+0x1a9/0x260 [ 1922.185689] ? __ia32_sys_read+0xb0/0xb0 [ 1922.186201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.186860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.187513] do_syscall_64+0x33/0x40 [ 1922.187976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1922.188620] RIP: 0033:0x7fdd5d6abb19 [ 1922.189085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.191378] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1922.192330] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1922.193226] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1922.194114] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1922.194992] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1922.195887] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1922.228253] FAULT_INJECTION: forcing a failure. [ 1922.228253] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.229858] CPU: 1 PID: 10771 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1922.230709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.231735] Call Trace: [ 1922.232080] dump_stack+0x107/0x167 [ 1922.232523] should_fail.cold+0x5/0xa [ 1922.232989] ? create_object.isra.0+0x3a/0xa20 [ 1922.233549] should_failslab+0x5/0x20 [ 1922.234009] kmem_cache_alloc+0x5b/0x310 [ 1922.234501] ? mark_held_locks+0x9e/0xe0 [ 1922.234994] create_object.isra.0+0x3a/0xa20 [ 1922.235531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1922.236146] kmem_cache_alloc_bulk+0x168/0x320 [ 1922.236715] io_submit_sqes+0x6fe6/0x8610 [ 1922.237245] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.237854] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.238443] ? find_held_lock+0x2c/0x110 [ 1922.238942] ? io_submit_sqes+0x8610/0x8610 [ 1922.239486] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1922.240070] ? wait_for_completion_io+0x270/0x270 [ 1922.240657] ? rcu_read_lock_any_held+0x75/0xa0 [ 1922.241224] ? vfs_write+0x354/0xb10 [ 1922.241674] ? fput_many+0x2f/0x1a0 [ 1922.242115] ? ksys_write+0x1a9/0x260 [ 1922.242575] ? __ia32_sys_read+0xb0/0xb0 [ 1922.243075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.243708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.244334] do_syscall_64+0x33/0x40 [ 1922.244783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1922.245398] RIP: 0033:0x7f58d5fcbb19 [ 1922.245846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.248060] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1922.248978] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1922.249834] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1922.250686] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1922.251549] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1922.252409] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:59:01 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:01 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xc00e0000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:01 executing program 6: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x7}, 0x4) 20:59:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x5}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 24) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:59:01 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xc9010000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x6}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 22) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:01 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1922.449872] FAULT_INJECTION: forcing a failure. [ 1922.449872] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.452695] CPU: 0 PID: 10806 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1922.454259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.456153] Call Trace: [ 1922.456755] dump_stack+0x107/0x167 [ 1922.457599] should_fail.cold+0x5/0xa [ 1922.458466] ? create_object.isra.0+0x3a/0xa20 [ 1922.459512] should_failslab+0x5/0x20 [ 1922.460379] kmem_cache_alloc+0x5b/0x310 [ 1922.461297] ? mark_held_locks+0x9e/0xe0 [ 1922.462221] create_object.isra.0+0x3a/0xa20 [ 1922.463210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1922.464367] kmem_cache_alloc_bulk+0x168/0x320 [ 1922.465406] io_submit_sqes+0x6fe6/0x8610 [ 1922.466391] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.467531] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.468619] ? find_held_lock+0x2c/0x110 [ 1922.469551] ? io_submit_sqes+0x8610/0x8610 [ 1922.470526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1922.471629] ? wait_for_completion_io+0x270/0x270 [ 1922.472740] ? rcu_read_lock_any_held+0x75/0xa0 [ 1922.473797] ? vfs_write+0x354/0xb10 [ 1922.474633] ? fput_many+0x2f/0x1a0 [ 1922.475462] ? ksys_write+0x1a9/0x260 [ 1922.476320] ? __ia32_sys_read+0xb0/0xb0 [ 1922.477245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.478436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.479611] do_syscall_64+0x33/0x40 [ 1922.480455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1922.481601] RIP: 0033:0x7fdd5d6abb19 [ 1922.482432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.486588] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1922.488311] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1922.489919] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1922.491536] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 20:59:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1922.493143] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1922.494871] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:59:01 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1922.514848] FAULT_INJECTION: forcing a failure. [ 1922.514848] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.516203] CPU: 1 PID: 10817 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1922.516979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.517914] Call Trace: [ 1922.518218] dump_stack+0x107/0x167 [ 1922.518630] should_fail.cold+0x5/0xa [ 1922.519068] should_failslab+0x5/0x20 [ 1922.519513] kmem_cache_alloc_bulk+0x4b/0x320 [ 1922.520029] io_submit_sqes+0x6fe6/0x8610 [ 1922.520510] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.521068] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1922.521619] ? find_held_lock+0x2c/0x110 [ 1922.522079] ? io_submit_sqes+0x8610/0x8610 [ 1922.522575] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1922.523117] ? wait_for_completion_io+0x270/0x270 [ 1922.523681] ? rcu_read_lock_any_held+0x75/0xa0 [ 1922.524205] ? vfs_write+0x354/0xb10 [ 1922.524628] ? fput_many+0x2f/0x1a0 [ 1922.525042] ? ksys_write+0x1a9/0x260 [ 1922.525472] ? __ia32_sys_read+0xb0/0xb0 [ 1922.525934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1922.526524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1922.527109] do_syscall_64+0x33/0x40 [ 1922.527538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1922.528122] RIP: 0033:0x7f58d5fcbb19 [ 1922.528543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.530615] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1922.531490] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1922.532296] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1922.533103] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1922.533922] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1922.534734] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:59:13 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:13 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0ffffff}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:13 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 25) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:59:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 23) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:13 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:13 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:13 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000a, 0x2010, r5, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x81, 0xc}, 0x7fff) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1934.370319] FAULT_INJECTION: forcing a failure. [ 1934.370319] name failslab, interval 1, probability 0, space 0, times 0 20:59:13 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xff000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1934.373083] CPU: 0 PID: 10846 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1934.374757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.376583] Call Trace: [ 1934.377171] dump_stack+0x107/0x167 [ 1934.377981] should_fail.cold+0x5/0xa [ 1934.378830] ? create_object.isra.0+0x3a/0xa20 [ 1934.379851] should_failslab+0x5/0x20 [ 1934.380698] kmem_cache_alloc+0x5b/0x310 [ 1934.381601] ? mark_held_locks+0x9e/0xe0 [ 1934.382510] create_object.isra.0+0x3a/0xa20 [ 1934.383491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.384624] kmem_cache_alloc_bulk+0x168/0x320 [ 1934.385648] io_submit_sqes+0x6fe6/0x8610 [ 1934.386597] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1934.387707] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1934.388773] ? find_held_lock+0x2c/0x110 [ 1934.389673] ? io_submit_sqes+0x8610/0x8610 [ 1934.390629] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1934.391704] ? wait_for_completion_io+0x270/0x270 [ 1934.392770] ? rcu_read_lock_any_held+0x75/0xa0 [ 1934.393791] ? vfs_write+0x354/0xb10 [ 1934.394610] ? fput_many+0x2f/0x1a0 [ 1934.395421] ? ksys_write+0x1a9/0x260 [ 1934.396259] ? __ia32_sys_read+0xb0/0xb0 [ 1934.397158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.398313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.399458] do_syscall_64+0x33/0x40 [ 1934.400277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.401403] RIP: 0033:0x7f58d5fcbb19 [ 1934.402220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.402573] FAULT_INJECTION: forcing a failure. [ 1934.402573] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.406198] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1934.406219] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1934.406230] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1934.406240] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.406251] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1934.406262] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1934.413425] CPU: 1 PID: 10841 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1934.414261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.415273] Call Trace: [ 1934.415598] dump_stack+0x107/0x167 [ 1934.416042] should_fail.cold+0x5/0xa [ 1934.416501] ? create_object.isra.0+0x3a/0xa20 [ 1934.417052] should_failslab+0x5/0x20 [ 1934.417517] kmem_cache_alloc+0x5b/0x310 [ 1934.418015] ? mark_held_locks+0x9e/0xe0 [ 1934.418509] create_object.isra.0+0x3a/0xa20 [ 1934.419049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.419705] kmem_cache_alloc_bulk+0x168/0x320 [ 1934.420274] io_submit_sqes+0x6fe6/0x8610 [ 1934.420793] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1934.421396] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1934.421984] ? find_held_lock+0x2c/0x110 [ 1934.422481] ? io_submit_sqes+0x8610/0x8610 [ 1934.423011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1934.423601] ? wait_for_completion_io+0x270/0x270 [ 1934.424184] ? rcu_read_lock_any_held+0x75/0xa0 [ 1934.424748] ? vfs_write+0x354/0xb10 [ 1934.425199] ? fput_many+0x2f/0x1a0 [ 1934.425639] ? ksys_write+0x1a9/0x260 [ 1934.426099] ? __ia32_sys_read+0xb0/0xb0 [ 1934.426595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.427228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.427871] do_syscall_64+0x33/0x40 [ 1934.428320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.428932] RIP: 0033:0x7fdd5d6abb19 [ 1934.429381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.431594] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1934.432508] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1934.433367] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1934.434221] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.435074] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1934.435943] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:59:13 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:13 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xfffff000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:31 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0x10000000) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x0, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 24) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x1eb}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 26) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:59:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1952.380372] FAULT_INJECTION: forcing a failure. [ 1952.380372] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.381889] CPU: 1 PID: 10879 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1952.382692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.383661] Call Trace: [ 1952.383971] dump_stack+0x107/0x167 [ 1952.384398] should_fail.cold+0x5/0xa [ 1952.384844] ? create_object.isra.0+0x3a/0xa20 [ 1952.385375] should_failslab+0x5/0x20 [ 1952.385816] kmem_cache_alloc+0x5b/0x310 [ 1952.386287] ? mark_held_locks+0x9e/0xe0 [ 1952.386760] create_object.isra.0+0x3a/0xa20 [ 1952.387266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.387852] kmem_cache_alloc_bulk+0x168/0x320 [ 1952.388388] io_submit_sqes+0x6fe6/0x8610 [ 1952.388884] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.389458] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.390008] ? find_held_lock+0x2c/0x110 [ 1952.390482] ? io_submit_sqes+0x8610/0x8610 [ 1952.390985] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.391541] ? wait_for_completion_io+0x270/0x270 [ 1952.392105] ? rcu_read_lock_any_held+0x75/0xa0 [ 1952.392639] ? vfs_write+0x354/0xb10 [ 1952.393068] ? fput_many+0x2f/0x1a0 [ 1952.393489] ? ksys_write+0x1a9/0x260 [ 1952.393924] ? __ia32_sys_read+0xb0/0xb0 [ 1952.394396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.395003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.395606] do_syscall_64+0x33/0x40 [ 1952.396036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.396620] RIP: 0033:0x7f58d5fcbb19 [ 1952.397049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.399152] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1952.400048] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1952.400876] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1952.401701] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.402525] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1952.403340] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:59:31 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xffffff7f}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1952.428227] FAULT_INJECTION: forcing a failure. [ 1952.428227] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.429669] CPU: 1 PID: 10894 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1952.430474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.431428] Call Trace: [ 1952.431748] dump_stack+0x107/0x167 [ 1952.432168] should_fail.cold+0x5/0xa [ 1952.432611] ? create_object.isra.0+0x3a/0xa20 [ 1952.433147] should_failslab+0x5/0x20 [ 1952.433589] kmem_cache_alloc+0x5b/0x310 [ 1952.434057] ? mark_held_locks+0x9e/0xe0 [ 1952.434527] create_object.isra.0+0x3a/0xa20 [ 1952.435035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.435624] kmem_cache_alloc_bulk+0x168/0x320 [ 1952.436158] io_submit_sqes+0x6fe6/0x8610 [ 1952.436652] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.437227] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.437786] ? find_held_lock+0x2c/0x110 [ 1952.438257] ? io_submit_sqes+0x8610/0x8610 [ 1952.438763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.439313] ? wait_for_completion_io+0x270/0x270 [ 1952.439879] ? rcu_read_lock_any_held+0x75/0xa0 [ 1952.440415] ? vfs_write+0x354/0xb10 [ 1952.440839] ? fput_many+0x2f/0x1a0 [ 1952.441264] ? ksys_write+0x1a9/0x260 [ 1952.441703] ? __ia32_sys_read+0xb0/0xb0 [ 1952.442169] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.442777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.443373] do_syscall_64+0x33/0x40 [ 1952.443811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.444405] RIP: 0033:0x7fdd5d6abb19 [ 1952.444834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.446956] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1952.447842] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1952.448663] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1952.449481] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.450306] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1952.451130] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:59:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x300}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 25) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xffffff9e}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:31 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x500}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 27) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:59:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1952.614073] FAULT_INJECTION: forcing a failure. [ 1952.614073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1952.617088] CPU: 0 PID: 10914 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1952.618678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.620591] Call Trace: [ 1952.621198] dump_stack+0x107/0x167 [ 1952.622036] should_fail.cold+0x5/0xa [ 1952.622914] __alloc_pages_nodemask+0x182/0x600 [ 1952.623992] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1952.625389] alloc_pages_current+0x187/0x280 [ 1952.626402] allocate_slab+0x26f/0x380 [ 1952.627300] ___slab_alloc+0x470/0x700 [ 1952.628204] ? io_submit_sqes+0x6fe6/0x8610 [ 1952.629210] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1952.630295] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1952.631346] io_submit_sqes+0x6fe6/0x8610 [ 1952.632339] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.633479] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.634588] ? find_held_lock+0x2c/0x110 [ 1952.635524] ? io_submit_sqes+0x8610/0x8610 [ 1952.636526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.637633] ? wait_for_completion_io+0x270/0x270 [ 1952.638741] ? rcu_read_lock_any_held+0x75/0xa0 [ 1952.639819] ? vfs_write+0x354/0xb10 [ 1952.640664] ? fput_many+0x2f/0x1a0 [ 1952.641485] ? ksys_write+0x1a9/0x260 [ 1952.642347] ? __ia32_sys_read+0xb0/0xb0 [ 1952.643279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.644471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.645645] do_syscall_64+0x33/0x40 [ 1952.646478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.647636] RIP: 0033:0x7f58d5fcbb19 [ 1952.648478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.652632] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1952.654359] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1952.655972] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1952.657590] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.659196] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1952.660817] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1952.685247] FAULT_INJECTION: forcing a failure. [ 1952.685247] name failslab, interval 1, probability 0, space 0, times 0 [ 1952.686594] CPU: 1 PID: 10930 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1952.687375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.688321] Call Trace: [ 1952.688628] dump_stack+0x107/0x167 [ 1952.689039] should_fail.cold+0x5/0xa [ 1952.689477] ? create_object.isra.0+0x3a/0xa20 [ 1952.689996] should_failslab+0x5/0x20 [ 1952.690439] kmem_cache_alloc+0x5b/0x310 [ 1952.690900] ? mark_held_locks+0x9e/0xe0 [ 1952.691359] create_object.isra.0+0x3a/0xa20 [ 1952.691860] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1952.692445] kmem_cache_alloc_bulk+0x168/0x320 [ 1952.692966] io_submit_sqes+0x6fe6/0x8610 [ 1952.693451] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.694013] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1952.694560] ? find_held_lock+0x2c/0x110 [ 1952.695028] ? io_submit_sqes+0x8610/0x8610 [ 1952.695521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1952.696083] ? wait_for_completion_io+0x270/0x270 [ 1952.696633] ? rcu_read_lock_any_held+0x75/0xa0 [ 1952.697155] ? vfs_write+0x354/0xb10 [ 1952.697581] ? fput_many+0x2f/0x1a0 [ 1952.697994] ? ksys_write+0x1a9/0x260 [ 1952.698425] ? __ia32_sys_read+0xb0/0xb0 [ 1952.698883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1952.699475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1952.700062] do_syscall_64+0x33/0x40 [ 1952.700485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1952.701064] RIP: 0033:0x7fdd5d6abb19 [ 1952.701491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.703567] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1952.704436] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1952.705255] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1952.706056] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.706862] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1952.707682] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1966.035033] FAULT_INJECTION: forcing a failure. [ 1966.035033] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.036465] CPU: 1 PID: 10951 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1966.037240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.038168] Call Trace: [ 1966.038474] dump_stack+0x107/0x167 [ 1966.038884] should_fail.cold+0x5/0xa [ 1966.039315] should_failslab+0x5/0x20 [ 1966.039751] kmem_cache_alloc_bulk+0x4b/0x320 [ 1966.040264] io_submit_sqes+0x6fe6/0x8610 [ 1966.040289] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.040299] __do_sys_io_uring_enter+0x6b2/0x1890 20:59:45 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xfffffff0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:45 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x0, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:45 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:45 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:45 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x600}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 26) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 28) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1966.040312] ? find_held_lock+0x2c/0x110 [ 1966.040325] ? io_submit_sqes+0x8610/0x8610 [ 1966.040339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.040350] ? wait_for_completion_io+0x270/0x270 [ 1966.040363] ? rcu_read_lock_any_held+0x75/0xa0 20:59:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 29) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:59:45 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xec0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1966.040373] ? vfs_write+0x354/0xb10 [ 1966.040384] ? fput_many+0x2f/0x1a0 [ 1966.040394] ? ksys_write+0x1a9/0x260 [ 1966.040405] ? __ia32_sys_read+0xb0/0xb0 [ 1966.040417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.040429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.040440] do_syscall_64+0x33/0x40 [ 1966.040451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.040458] RIP: 0033:0x7fdd5d6abb19 [ 1966.040468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.040473] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 20:59:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:45 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xffffffff}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:45 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x66020000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1966.040485] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1966.040490] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 20:59:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 30) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1966.040496] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 20:59:45 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x2010, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:45 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf00}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1966.040501] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1966.040507] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1966.117317] FAULT_INJECTION: forcing a failure. [ 1966.117317] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.117341] CPU: 0 PID: 10960 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1966.117351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.117357] Call Trace: [ 1966.117384] dump_stack+0x107/0x167 [ 1966.117413] should_fail.cold+0x5/0xa [ 1966.117435] ? create_object.isra.0+0x3a/0xa20 [ 1966.117458] should_failslab+0x5/0x20 [ 1966.117478] kmem_cache_alloc+0x5b/0x310 [ 1966.117498] ? mark_held_locks+0x9e/0xe0 [ 1966.117522] create_object.isra.0+0x3a/0xa20 [ 1966.117538] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.117565] kmem_cache_alloc_bulk+0x168/0x320 [ 1966.117592] io_submit_sqes+0x6fe6/0x8610 [ 1966.117643] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.117661] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.117684] ? find_held_lock+0x2c/0x110 [ 1966.117710] ? io_submit_sqes+0x8610/0x8610 [ 1966.117736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.117759] ? wait_for_completion_io+0x270/0x270 [ 1966.117782] ? rcu_read_lock_any_held+0x75/0xa0 [ 1966.117800] ? vfs_write+0x354/0xb10 [ 1966.117819] ? fput_many+0x2f/0x1a0 [ 1966.117840] ? ksys_write+0x1a9/0x260 [ 1966.117861] ? __ia32_sys_read+0xb0/0xb0 [ 1966.117886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.117907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.117930] do_syscall_64+0x33/0x40 [ 1966.117950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.117963] RIP: 0033:0x7f58d5fcbb19 [ 1966.117983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.117993] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1966.118015] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1966.118026] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1966.118038] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.118049] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1966.118060] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1966.125337] FAULT_INJECTION: forcing a failure. [ 1966.125337] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.125348] CPU: 1 PID: 10968 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1966.125353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.125356] Call Trace: [ 1966.125367] dump_stack+0x107/0x167 [ 1966.125378] should_fail.cold+0x5/0xa [ 1966.125393] ? create_object.isra.0+0x3a/0xa20 [ 1966.125404] should_failslab+0x5/0x20 [ 1966.125414] kmem_cache_alloc+0x5b/0x310 [ 1966.125424] ? mark_held_locks+0x9e/0xe0 [ 1966.125435] create_object.isra.0+0x3a/0xa20 [ 1966.125444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.125457] kmem_cache_alloc_bulk+0x168/0x320 [ 1966.125470] io_submit_sqes+0x6fe6/0x8610 [ 1966.125495] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.125504] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.125516] ? find_held_lock+0x2c/0x110 [ 1966.125529] ? io_submit_sqes+0x8610/0x8610 [ 1966.125543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.125554] ? wait_for_completion_io+0x270/0x270 [ 1966.125566] ? rcu_read_lock_any_held+0x75/0xa0 [ 1966.125574] ? vfs_write+0x354/0xb10 [ 1966.125585] ? fput_many+0x2f/0x1a0 [ 1966.125595] ? ksys_write+0x1a9/0x260 [ 1966.125606] ? __ia32_sys_read+0xb0/0xb0 [ 1966.125618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.125629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.125640] do_syscall_64+0x33/0x40 [ 1966.125650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.125656] RIP: 0033:0x7fdd5d6abb19 [ 1966.125666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.125671] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1966.125682] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1966.125688] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1966.125694] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.125699] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1966.125705] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1966.276328] FAULT_INJECTION: forcing a failure. [ 1966.276328] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.349156] CPU: 0 PID: 10982 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1966.350711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.352586] Call Trace: [ 1966.353185] dump_stack+0x107/0x167 [ 1966.354005] should_fail.cold+0x5/0xa [ 1966.354862] ? create_object.isra.0+0x3a/0xa20 [ 1966.355895] should_failslab+0x5/0x20 [ 1966.356748] kmem_cache_alloc+0x5b/0x310 [ 1966.357653] ? mark_held_locks+0x9e/0xe0 [ 1966.358560] create_object.isra.0+0x3a/0xa20 [ 1966.359542] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.360685] kmem_cache_alloc_bulk+0x168/0x320 [ 1966.361712] io_submit_sqes+0x6fe6/0x8610 [ 1966.362664] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.363777] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1966.364851] ? find_held_lock+0x2c/0x110 [ 1966.365761] ? io_submit_sqes+0x8610/0x8610 [ 1966.366741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.367826] ? wait_for_completion_io+0x270/0x270 [ 1966.368907] ? rcu_read_lock_any_held+0x75/0xa0 [ 1966.369941] ? vfs_write+0x354/0xb10 [ 1966.370774] ? fput_many+0x2f/0x1a0 [ 1966.371584] ? ksys_write+0x1a9/0x260 [ 1966.372442] ? __ia32_sys_read+0xb0/0xb0 [ 1966.373349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.374527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.375675] do_syscall_64+0x33/0x40 [ 1966.376513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.377650] RIP: 0033:0x7fdd5d6abb19 [ 1966.378484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.382594] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1966.384310] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1966.385904] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1966.387497] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.389087] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1966.390679] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 20:59:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x0, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:59 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:59 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 31) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:59:59 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:59 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000280)}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000480)=""/239, 0xef}], 0x7) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 27) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:59 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:59 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x8100}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1980.264046] FAULT_INJECTION: forcing a failure. [ 1980.264046] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.264994] FAULT_INJECTION: forcing a failure. [ 1980.264994] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.266886] CPU: 0 PID: 11005 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1980.270310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.272223] Call Trace: [ 1980.272839] dump_stack+0x107/0x167 [ 1980.273686] should_fail.cold+0x5/0xa [ 1980.274563] ? create_object.isra.0+0x3a/0xa20 [ 1980.275624] should_failslab+0x5/0x20 [ 1980.276527] kmem_cache_alloc+0x5b/0x310 [ 1980.277470] ? mark_held_locks+0x9e/0xe0 [ 1980.278424] create_object.isra.0+0x3a/0xa20 [ 1980.279441] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.280635] kmem_cache_alloc_bulk+0x168/0x320 [ 1980.281698] io_submit_sqes+0x6fe6/0x8610 [ 1980.282696] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1980.283856] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1980.285004] ? find_held_lock+0x2c/0x110 [ 1980.285951] ? io_submit_sqes+0x8610/0x8610 [ 1980.286947] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.288069] ? wait_for_completion_io+0x270/0x270 [ 1980.289209] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.290289] ? vfs_write+0x354/0xb10 [ 1980.291136] ? fput_many+0x2f/0x1a0 [ 1980.291987] ? ksys_write+0x1a9/0x260 [ 1980.292885] ? __ia32_sys_read+0xb0/0xb0 [ 1980.293826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.295032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.296228] do_syscall_64+0x33/0x40 [ 1980.297097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.298291] RIP: 0033:0x7fdd5d6abb19 [ 1980.299155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.303372] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1980.305118] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1980.306759] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1980.308402] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.310026] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1980.311654] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1980.313667] CPU: 1 PID: 11011 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1980.314851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.316273] Call Trace: [ 1980.316728] dump_stack+0x107/0x167 [ 1980.317353] should_fail.cold+0x5/0xa [ 1980.317998] ? create_object.isra.0+0x3a/0xa20 [ 1980.318773] should_failslab+0x5/0x20 [ 1980.319415] kmem_cache_alloc+0x5b/0x310 [ 1980.320099] ? mark_held_locks+0x9e/0xe0 [ 1980.320804] create_object.isra.0+0x3a/0xa20 [ 1980.321548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.322405] kmem_cache_alloc_bulk+0x168/0x320 [ 1980.323172] io_submit_sqes+0x6fe6/0x8610 [ 1980.323911] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1980.324761] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1980.325586] ? find_held_lock+0x2c/0x110 [ 1980.326282] ? io_submit_sqes+0x8610/0x8610 [ 1980.327013] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.327824] ? wait_for_completion_io+0x270/0x270 [ 1980.328645] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.329433] ? vfs_write+0x354/0xb10 [ 1980.330061] ? fput_many+0x2f/0x1a0 [ 1980.330686] ? ksys_write+0x1a9/0x260 [ 1980.331333] ? __ia32_sys_read+0xb0/0xb0 [ 1980.332025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.332906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.333774] do_syscall_64+0x33/0x40 [ 1980.334407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.335270] RIP: 0033:0x7f58d5fcbb19 [ 1980.335910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.339001] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1980.340291] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1980.341483] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1980.342687] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.343907] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1980.345129] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 20:59:59 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x2}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 20:59:59 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:59:59 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:59 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xc00e}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 20:59:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 28) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 20:59:59 executing program 6: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0xfffffffffffffffc, 0x1, 0x4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) openat(r6, &(0x7f0000000280)='./file1\x00', 0x4801c2, 0x0) 20:59:59 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x3}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1980.532748] FAULT_INJECTION: forcing a failure. [ 1980.532748] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.534621] CPU: 1 PID: 11036 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1980.535615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.536807] Call Trace: [ 1980.537199] dump_stack+0x107/0x167 [ 1980.537715] should_fail.cold+0x5/0xa [ 1980.538266] should_failslab+0x5/0x20 [ 1980.538812] kmem_cache_alloc_bulk+0x4b/0x320 [ 1980.539453] io_submit_sqes+0x6fe6/0x8610 [ 1980.540068] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1980.540776] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1980.541466] ? find_held_lock+0x2c/0x110 [ 1980.542045] ? io_submit_sqes+0x8610/0x8610 [ 1980.542658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.543350] ? wait_for_completion_io+0x270/0x270 [ 1980.544036] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.544704] ? vfs_write+0x354/0xb10 [ 1980.545231] ? fput_many+0x2f/0x1a0 [ 1980.545746] ? ksys_write+0x1a9/0x260 [ 1980.546284] ? __ia32_sys_read+0xb0/0xb0 [ 1980.546861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.547610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.548349] do_syscall_64+0x33/0x40 [ 1980.548883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.549613] RIP: 0033:0x7f58d5fcbb19 [ 1980.550140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.552758] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1980.553835] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1980.554826] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1980.555823] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.556817] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1980.557824] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 21:00:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:14 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={0x0, &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xeb01}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:14 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x4}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 32) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1995.177794] FAULT_INJECTION: forcing a failure. [ 1995.177794] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.179589] CPU: 1 PID: 11057 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1995.180525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.181599] Call Trace: [ 1995.181955] dump_stack+0x107/0x167 [ 1995.182439] should_fail.cold+0x5/0xa [ 1995.182945] ? create_object.isra.0+0x3a/0xa20 [ 1995.183552] should_failslab+0x5/0x20 [ 1995.184059] kmem_cache_alloc+0x5b/0x310 [ 1995.184607] ? mark_held_locks+0x9e/0xe0 [ 1995.185150] create_object.isra.0+0x3a/0xa20 [ 1995.185731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1995.186407] kmem_cache_alloc_bulk+0x168/0x320 [ 1995.187017] io_submit_sqes+0x6fe6/0x8610 [ 1995.187580] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.188248] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.188885] ? find_held_lock+0x2c/0x110 [ 1995.189423] ? io_submit_sqes+0x8610/0x8610 [ 1995.189997] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1995.190632] ? wait_for_completion_io+0x270/0x270 [ 1995.191268] ? rcu_read_lock_any_held+0x75/0xa0 [ 1995.191881] ? vfs_write+0x354/0xb10 [ 1995.192375] ? fput_many+0x2f/0x1a0 [ 1995.192854] ? ksys_write+0x1a9/0x260 [ 1995.193354] ? __ia32_sys_read+0xb0/0xb0 [ 1995.193897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.193909] ? syscall_enter_from_user_mode+0x1d/0x50 21:00:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1995.193922] do_syscall_64+0x33/0x40 [ 1995.193934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 21:00:14 executing program 6: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x6, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000300)="1cba0b85b7bb1fcaa45c23625d0c1862733cd6bec2abdc028c9e66c13baefb4fafb7c37fddad3ba1c3f58a5e4a0199b59668bf5cb093559e2d0b298296a99aa7ab1e23ea6a243a3e15e0cb439b6cc15fed4b3ddde5c41a43994d6fa29e7da8c90be82cbb524426a163883a3565e1ffc5970bd1c87e9926f4a8c6f26c5696f513bda8ffd0c40e2f70967813055197e2bbe19eb445596a0b85da2348fb6af0bd9490966d3907357d9cbe7d2fd846d265f5f5dc39b04cc153ee", 0xb8}, {&(0x7f0000000280)="425569b733946a196c494d0bb5a12205260e6509e2b374e770b901593385c959cfde2e9867f9ab81dbb9ff22025f039c8d847a192528059367fc7d41aed92ce0", 0x40, 0x1}, {&(0x7f00000003c0)="82e4a1a414215139e5c7e251d93edc182c080a45cfc44ac7c25bb23aec3b", 0x1e, 0x200e}, {&(0x7f0000000400)="2c64f0ee91f75d5efff09593d585c87ef7331bf7fa54989af5454f96394c86b57f1709669006c6ac57fe7b42e3c51df33eeaf0b6b48a2236d2338fe4325cfeaa60868a780fde0bc0cad560b1d20079aa41604e89c180fdab86d35ef440da59d88395820ccf7395c8da17db8ba5cb761b9d21eb9d99c1f9d66be9eff0a48f8a43d7fd4fd3fec32f15a0ecfd5ae77914fd1137c20785d8f165fe00140756bf2b6ef957f645de39ab7eac3857e363d34c7333bc259f7423f35041ef0d9034d5ca2bf045f103a9fffd67a781f933927a0e6c2eeeb2208f701cdaa256c478c5507ae8715a", 0xe2, 0x4}, {&(0x7f0000000500)="6febd3c559954b13bc0471e0809496e29af91cca2db3e082f8dbaa83b925af0b8e99907a81df00c029dfe580af51a38b3da35426d2d6118c57249ec6d86511dbf7fea71252db3fd239228f1d4b269150b421dda0f0dd80677ac1af785f6724c2709a5020", 0x64, 0x4}, {&(0x7f0000000580)="55bc19ac84bf60befc", 0x9, 0x1}, {&(0x7f00000005c0)="3a54d59cd992fce18ae9750084a2b86d76f3add4debbe31f26118dd608e95ec9835edc3d70b959928e2237534fbf2a0b2542ead178292733c0c979da951c088a861fffe60dc5f2815eecb53e2ca256c70aed691b15244c5c35fbb50854d1706af8df2e792b653808fa25925fbc86b22a0bde7d9a2625b0d27964e003610a27636c50c30aeae459dbc6d690bc3eda1250b0f9d3d5cdb17aa074e85ebb5a78c5e7255468044fe3f32ca19487", 0xab, 0x8}, {&(0x7f0000000680)="3b01680ab19bef7e1d6d843b42040d8642b9a0097f522d53b3728b07b86720e45a4ab3800b20f84b37a221231361", 0x2e, 0xffffffff}], 0x804, &(0x7f0000000780)={[{@stripe}], [{@obj_role}, {@measure}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@obj_type={'obj_type', 0x3d, '#\'-'}}, {@smackfshat={'smackfshat', 0x3d, '/!{t..'}}, {@appraise}, {@obj_type}, {@fsname={'fsname', 0x3d, '\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d34, &(0x7f0000000840)={0x0, 0xf218, 0x8, 0x2, 0x27d, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) r6 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000980)={0x5, 0x80, 0x4, 0xff, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000940), 0xe}, 0x888, 0x1f, 0x9, 0x4, 0x4, 0x5, 0x8001, 0x0, 0x1f, 0x0, 0x200}, r6, 0x4, r0, 0x2) [ 1995.193942] RIP: 0033:0x7fdd5d6abb19 21:00:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 29) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) [ 1995.193953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:00:14 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 1995.193959] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1995.193973] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 21:00:14 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x5}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 33) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1995.193979] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1995.193986] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1995.193993] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1995.193999] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 1995.262520] loop6: detected capacity change from 0 to 135266304 [ 1995.289823] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 1995.295801] FAULT_INJECTION: forcing a failure. [ 1995.295801] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.295816] CPU: 1 PID: 11077 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1995.295822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.295826] Call Trace: [ 1995.295846] dump_stack+0x107/0x167 [ 1995.295859] should_fail.cold+0x5/0xa [ 1995.295873] ? create_object.isra.0+0x3a/0xa20 [ 1995.295887] should_failslab+0x5/0x20 [ 1995.295898] kmem_cache_alloc+0x5b/0x310 [ 1995.295913] create_object.isra.0+0x3a/0xa20 [ 1995.295922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1995.295936] kmem_cache_alloc_bulk+0x168/0x320 [ 1995.295952] io_submit_sqes+0x6fe6/0x8610 [ 1995.295979] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.295988] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.296003] ? find_held_lock+0x2c/0x110 [ 1995.296017] ? io_submit_sqes+0x8610/0x8610 [ 1995.296032] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1995.296043] ? wait_for_completion_io+0x270/0x270 [ 1995.296057] ? rcu_read_lock_any_held+0x75/0xa0 [ 1995.296067] ? vfs_write+0x354/0xb10 [ 1995.296085] ? fput_many+0x2f/0x1a0 [ 1995.296096] ? ksys_write+0x1a9/0x260 [ 1995.296107] ? __ia32_sys_read+0xb0/0xb0 [ 1995.296121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.296133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1995.296145] do_syscall_64+0x33/0x40 [ 1995.296157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1995.296164] RIP: 0033:0x7f58d5fcbb19 [ 1995.296174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.296181] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1995.296194] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1995.296200] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1995.296206] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1995.296212] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1995.296219] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 [ 1995.345169] FAULT_INJECTION: forcing a failure. [ 1995.345169] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.373689] CPU: 1 PID: 11081 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 1995.374509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.375488] Call Trace: [ 1995.375808] dump_stack+0x107/0x167 [ 1995.376243] should_fail.cold+0x5/0xa [ 1995.376698] ? create_object.isra.0+0x3a/0xa20 [ 1995.377235] should_failslab+0x5/0x20 [ 1995.377679] kmem_cache_alloc+0x5b/0x310 [ 1995.378158] ? mark_held_locks+0x9e/0xe0 [ 1995.378636] create_object.isra.0+0x3a/0xa20 [ 1995.379144] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1995.379746] kmem_cache_alloc_bulk+0x168/0x320 [ 1995.380299] io_submit_sqes+0x6fe6/0x8610 [ 1995.380798] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.381378] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.381944] ? find_held_lock+0x2c/0x110 [ 1995.382422] ? io_submit_sqes+0x8610/0x8610 [ 1995.382930] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1995.383496] ? wait_for_completion_io+0x270/0x270 [ 1995.384060] ? rcu_read_lock_any_held+0x75/0xa0 [ 1995.384607] ? vfs_write+0x354/0xb10 [ 1995.385045] ? fput_many+0x2f/0x1a0 [ 1995.385469] ? ksys_write+0x1a9/0x260 [ 1995.385918] ? __ia32_sys_read+0xb0/0xb0 [ 1995.386394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.387005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1995.387614] do_syscall_64+0x33/0x40 [ 1995.388049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1995.388652] RIP: 0033:0x7fdd5d6abb19 [ 1995.389084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.391217] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1995.392113] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 1995.392942] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1995.393768] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 1995.394599] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1995.395430] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 21:00:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 30) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:14 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x8}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 1995.443955] FAULT_INJECTION: forcing a failure. [ 1995.443955] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.446805] CPU: 0 PID: 11092 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 1995.448419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.450306] Call Trace: [ 1995.450914] dump_stack+0x107/0x167 [ 1995.451745] should_fail.cold+0x5/0xa [ 1995.452643] ? create_object.isra.0+0x3a/0xa20 [ 1995.453686] should_failslab+0x5/0x20 [ 1995.454556] kmem_cache_alloc+0x5b/0x310 [ 1995.455481] ? mark_held_locks+0x9e/0xe0 [ 1995.456441] create_object.isra.0+0x3a/0xa20 [ 1995.457445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1995.458611] kmem_cache_alloc_bulk+0x168/0x320 [ 1995.459658] io_submit_sqes+0x6fe6/0x8610 [ 1995.460658] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.461792] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1995.462892] ? find_held_lock+0x2c/0x110 [ 1995.463821] ? io_submit_sqes+0x8610/0x8610 [ 1995.464835] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1995.465934] ? wait_for_completion_io+0x270/0x270 [ 1995.467033] ? rcu_read_lock_any_held+0x75/0xa0 [ 1995.468103] ? vfs_write+0x354/0xb10 [ 1995.468969] ? fput_many+0x2f/0x1a0 [ 1995.469800] ? ksys_write+0x1a9/0x260 [ 1995.470667] ? __ia32_sys_read+0xb0/0xb0 [ 1995.471597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.472813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1995.473988] do_syscall_64+0x33/0x40 [ 1995.474835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1995.476000] RIP: 0033:0x7f58d5fcbb19 [ 1995.476873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1995.481119] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1995.482866] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 1995.484528] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 1995.486149] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1995.487772] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1995.489397] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 21:00:14 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xff000000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={0x0, &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 34) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:00:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 31) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:28 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0xf}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:28 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xff00}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:28 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:28 executing program 6: r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000340), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lseek(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000001) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x18, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) io_uring_enter(r1, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:28 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:28 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0xf0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 2009.586864] FAULT_INJECTION: forcing a failure. [ 2009.586864] name failslab, interval 1, probability 0, space 0, times 0 [ 2009.589684] CPU: 1 PID: 11118 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2009.591244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.593137] Call Trace: [ 2009.593733] dump_stack+0x107/0x167 [ 2009.594556] should_fail.cold+0x5/0xa [ 2009.595417] ? create_object.isra.0+0x3a/0xa20 [ 2009.596465] should_failslab+0x5/0x20 [ 2009.597318] kmem_cache_alloc+0x5b/0x310 [ 2009.598229] ? mark_held_locks+0x9e/0xe0 [ 2009.599144] create_object.isra.0+0x3a/0xa20 [ 2009.600128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2009.601263] kmem_cache_alloc_bulk+0x168/0x320 [ 2009.602312] io_submit_sqes+0x6fe6/0x8610 [ 2009.603277] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2009.604405] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2009.605493] ? find_held_lock+0x2c/0x110 [ 2009.606407] ? io_submit_sqes+0x8610/0x8610 [ 2009.607382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2009.608471] ? wait_for_completion_io+0x270/0x270 [ 2009.609554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2009.610590] ? vfs_write+0x354/0xb10 [ 2009.611429] ? fput_many+0x2f/0x1a0 [ 2009.612247] ? ksys_write+0x1a9/0x260 [ 2009.613101] ? __ia32_sys_read+0xb0/0xb0 [ 2009.614014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2009.615191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2009.616358] do_syscall_64+0x33/0x40 [ 2009.617197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2009.618348] RIP: 0033:0x7f58d5fcbb19 [ 2009.619179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.623316] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2009.625049] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 2009.626657] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2009.628270] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2009.629875] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2009.631483] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 21:00:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:29 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x1c9}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x34000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 2009.700716] FAULT_INJECTION: forcing a failure. [ 2009.700716] name failslab, interval 1, probability 0, space 0, times 0 [ 2009.703361] CPU: 1 PID: 11131 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2009.704901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.706766] Call Trace: [ 2009.707358] dump_stack+0x107/0x167 [ 2009.708179] should_fail.cold+0x5/0xa [ 2009.709050] ? create_object.isra.0+0x3a/0xa20 [ 2009.710075] should_failslab+0x5/0x20 [ 2009.710937] kmem_cache_alloc+0x5b/0x310 [ 2009.711859] create_object.isra.0+0x3a/0xa20 [ 2009.712847] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2009.713993] kmem_cache_alloc_bulk+0x168/0x320 [ 2009.715023] io_submit_sqes+0x6fe6/0x8610 [ 2009.715963] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2009.717086] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2009.718213] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2009.719296] ? find_held_lock+0x2c/0x110 [ 2009.720218] ? io_submit_sqes+0x8610/0x8610 [ 2009.721200] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2009.722286] ? wait_for_completion_io+0x270/0x270 [ 2009.723374] ? rcu_read_lock_any_held+0x75/0xa0 [ 2009.724427] ? vfs_write+0x354/0xb10 [ 2009.725269] ? fput_many+0x2f/0x1a0 [ 2009.726097] ? ksys_write+0x1a9/0x260 [ 2009.726955] ? __ia32_sys_read+0xb0/0xb0 [ 2009.727875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2009.729062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2009.730220] do_syscall_64+0x33/0x40 [ 2009.731056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2009.732207] RIP: 0033:0x7fdd5d6abb19 21:00:29 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x300}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 2009.733056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.737404] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2009.739121] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 2009.740752] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000005 [ 2009.742362] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2009.743966] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2009.745580] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 21:00:29 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 32) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2009.855923] FAULT_INJECTION: forcing a failure. [ 2009.855923] name failslab, interval 1, probability 0, space 0, times 0 [ 2009.859015] CPU: 1 PID: 11163 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2009.860585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2009.862447] Call Trace: [ 2009.863054] dump_stack+0x107/0x167 [ 2009.863886] should_fail.cold+0x5/0xa [ 2009.864764] ? create_object.isra.0+0x3a/0xa20 [ 2009.865800] should_failslab+0x5/0x20 [ 2009.866681] kmem_cache_alloc+0x5b/0x310 [ 2009.867607] ? mark_held_locks+0x9e/0xe0 [ 2009.868535] create_object.isra.0+0x3a/0xa20 [ 2009.869514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2009.870651] kmem_cache_alloc_bulk+0x168/0x320 [ 2009.871690] io_submit_sqes+0x6fe6/0x8610 [ 2009.872656] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2009.873765] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2009.874842] ? find_held_lock+0x2c/0x110 [ 2009.875768] ? io_submit_sqes+0x8610/0x8610 [ 2009.876741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2009.877816] ? wait_for_completion_io+0x270/0x270 [ 2009.878893] ? rcu_read_lock_any_held+0x75/0xa0 [ 2009.879939] ? vfs_write+0x354/0xb10 [ 2009.880780] ? fput_many+0x2f/0x1a0 [ 2009.881593] ? ksys_write+0x1a9/0x260 [ 2009.882448] ? __ia32_sys_read+0xb0/0xb0 [ 2009.883360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2009.884538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2009.885691] do_syscall_64+0x33/0x40 [ 2009.886524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2009.887675] RIP: 0033:0x7f58d5fcbb19 [ 2009.888523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2009.892652] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2009.894353] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 2009.895943] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2009.897551] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2009.899146] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2009.900754] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 21:00:41 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x80000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={0x0, &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 33) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:41 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0xee, 0x0, 0x0, 0x40008, &(0x7f0000000040)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:41 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:41 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x500}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 35) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 2022.514648] FAULT_INJECTION: forcing a failure. [ 2022.514648] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.517340] CPU: 1 PID: 11179 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2022.518795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.520550] Call Trace: [ 2022.521112] dump_stack+0x107/0x167 [ 2022.521879] should_fail.cold+0x5/0xa [ 2022.522683] ? create_object.isra.0+0x3a/0xa20 [ 2022.523649] should_failslab+0x5/0x20 [ 2022.524464] kmem_cache_alloc+0x5b/0x310 [ 2022.525319] ? mark_held_locks+0x9e/0xe0 [ 2022.526174] create_object.isra.0+0x3a/0xa20 [ 2022.527103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.528178] kmem_cache_alloc_bulk+0x168/0x320 [ 2022.529160] io_submit_sqes+0x6fe6/0x8610 [ 2022.530071] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.531123] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.532135] ? find_held_lock+0x2c/0x110 [ 2022.533002] ? io_submit_sqes+0x8610/0x8610 [ 2022.533890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.534875] ? wait_for_completion_io+0x270/0x270 [ 2022.535887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.536870] ? vfs_write+0x354/0xb10 [ 2022.537657] ? fput_many+0x2f/0x1a0 [ 2022.538422] ? ksys_write+0x1a9/0x260 [ 2022.539223] ? __ia32_sys_read+0xb0/0xb0 [ 2022.540068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.541175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.542269] do_syscall_64+0x33/0x40 [ 2022.543057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.544132] RIP: 0033:0x7fdd5d6abb19 [ 2022.544917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.548761] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.550353] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 2022.551844] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2022.553331] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.554819] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2022.556297] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 [ 2022.590319] FAULT_INJECTION: forcing a failure. [ 2022.590319] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.593062] CPU: 0 PID: 11189 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2022.594659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.596588] Call Trace: [ 2022.597200] dump_stack+0x107/0x167 [ 2022.598045] should_fail.cold+0x5/0xa [ 2022.598932] ? create_object.isra.0+0x3a/0xa20 [ 2022.599984] should_failslab+0x5/0x20 [ 2022.600868] kmem_cache_alloc+0x5b/0x310 [ 2022.601798] ? mark_held_locks+0x9e/0xe0 [ 2022.602742] create_object.isra.0+0x3a/0xa20 [ 2022.603750] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.604931] kmem_cache_alloc_bulk+0x168/0x320 [ 2022.605997] io_submit_sqes+0x6fe6/0x8610 [ 2022.606986] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.608147] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.609273] ? find_held_lock+0x2c/0x110 [ 2022.610225] ? io_submit_sqes+0x8610/0x8610 [ 2022.611228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.612349] ? wait_for_completion_io+0x270/0x270 [ 2022.613476] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.614545] ? vfs_write+0x354/0xb10 [ 2022.615414] ? fput_many+0x2f/0x1a0 [ 2022.616255] ? ksys_write+0x1a9/0x260 [ 2022.617083] ? __ia32_sys_read+0xb0/0xb0 [ 2022.618046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.619278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.620458] do_syscall_64+0x33/0x40 [ 2022.621269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.622483] RIP: 0033:0x7f58d5fcbb19 [ 2022.623371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.627734] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.629537] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 2022.631220] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2022.632910] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.634578] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2022.636260] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 21:00:42 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x400300}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:42 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:42 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:42 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0xec0}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:42 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 36) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:00:42 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:42 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:42 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0xf0ffff}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 2022.803165] FAULT_INJECTION: forcing a failure. [ 2022.803165] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.805882] CPU: 1 PID: 11214 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2022.807371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.809168] Call Trace: [ 2022.809743] dump_stack+0x107/0x167 [ 2022.810526] should_fail.cold+0x5/0xa [ 2022.811345] ? create_object.isra.0+0x3a/0xa20 [ 2022.812326] should_failslab+0x5/0x20 [ 2022.813151] kmem_cache_alloc+0x5b/0x310 [ 2022.814020] ? mark_held_locks+0x9e/0xe0 [ 2022.814894] create_object.isra.0+0x3a/0xa20 [ 2022.815836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.816938] kmem_cache_alloc_bulk+0x168/0x320 [ 2022.817928] io_submit_sqes+0x6fe6/0x8610 [ 2022.818846] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.819912] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2022.820956] ? find_held_lock+0x2c/0x110 [ 2022.821830] ? io_submit_sqes+0x8610/0x8610 [ 2022.822758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.823790] ? wait_for_completion_io+0x270/0x270 [ 2022.824833] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.825825] ? vfs_write+0x354/0xb10 [ 2022.826623] ? fput_many+0x2f/0x1a0 21:00:42 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2022.827401] ? ksys_write+0x1a9/0x260 [ 2022.828455] ? __ia32_sys_read+0xb0/0xb0 [ 2022.829340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.830463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.831568] do_syscall_64+0x33/0x40 [ 2022.832364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.833465] RIP: 0033:0x7fdd5d6abb19 [ 2022.834328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.838514] RSP: 002b:00007fdd5ac21188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.840159] RAX: ffffffffffffffda RBX: 00007fdd5d7bef60 RCX: 00007fdd5d6abb19 [ 2022.841704] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2022.843247] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.844796] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2022.846344] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 21:00:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180), &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:55 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0xf00}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:55 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x1000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000180), 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 34) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="737973e40444f0b43ee6664776ec5f696d6d757461626c652c7065c5076da48ba2f966726d69745f61707072616973842c6d6561737572752c6d6561737572652c000000000000000000000000000000fcbda79614f55a1a43e28ca98a15a9edc3ff36968653c94f6375ced1299a7daacaedd027ed9759ea9252e935c690a4764bbf662636430d5e93be9139c47b29df0a0d2866e2f197365d906da46b661af7023214645319475901c79a7a9d4bbd71c4622413e3"]) r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xf, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) 21:00:55 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xffff, 0x1, &(0x7f0000000300)="448526528122fe8b7328180b52a0166afa4f310362d6d6edffba7c4c89bbb7adbb19f78aafbe455b4fb165614c261005a3f0e3ed7f13f4460394e3d20c040f16eaca4250cac5c2edfb7ae9b6edce46b5e0f3ae5ab685baf4ca4b5e09c1a08cab60426bc81275a19985f885cbb6f43f1418d176fc67febf11ad5bb8bb01243a790bdd", 0x7, 0x0, 0x0, {0x3}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x40100, 0x110) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000001c0)={0x3ff, 0x6, 0x1}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) 21:00:55 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470", 0x12}, {0x0}], 0x2800018, &(0x7f0000000440)=ANY=[]) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xef8e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[]) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x7579, 0x0, 0x2, 0x0, 0x0) (fail_nth: 37) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x408002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 21:00:55 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="493aca90679f6357ef4efb59378181993a495067d71a5cba47bbb798dcd1b66207c2ae01674abea20bf8982017f8769751f606fe2db7b48a9ab51be60f9659cb2f8aad27cae62a4c7a377afc36770ce7cc269ca9330d84c8654e1d5df67aa9c6b858d4aa4c9e44d6f3465fa8af28c67bfca3270511a12b503db9f25b18bc07fd59e7423e6c5465f7ec765707bf6c3ab6fca34e00297de3a1d80bb4688b447275bb09455b71500d10eba157", 0xab}, {&(0x7f0000000800)="73956b5f3e92cc39f4929d0c90b198909973e8009c4414376236b348a9428e055c1c58d54c2e9bbfcd5cc80d1af78794fa9326df624dbb588691e6d0b961d3802c7b43a427aa68d83ed32ff8bd6c72e0ebaac14f9e6ea75fcd6420a8836400514e1dbad2befff900daa8e1655b4de599c92d74f582965dac81ab56c1414d447b99373db195f943cde33662a4192d08495030bb9ad65471881764f3fb3f6e715cb4f600ee1274541384f344e61e8112e6780107571e8591492f229dff01d55d24ae56eacd2b61167290c36abac9e378", 0xcf}, {&(0x7f0000000900)="f394467885311ea0dc739eabe7118aaaa24549512d1fa41fb6247af941ea0f55ab7acaac3e1468630e52559709357af5dd17cb275eb4f498c5790bb8192999713d0685a72af9c903241b177ca07fc8d01a20014a66b05e989f296dd356a87ea1bfaabb3d22a70410b4fbdc36f02428f8abd237d314ce78389a6a2eec99b23c9fb06497dea3fc3cd6206004a710", 0x8d}, {&(0x7f00000009c0)="be1d4d251ded8d15e9a92c94f05146dcfdf1ca0d33f88060c280fc8d929d116a8bb3149fc7bdc5ebcbfd7dd1a7b6ad060b152d97d976b4c52d40962c4a69e74da2d3f98d9eab52a8cb925e975dbf580e2e8270abaf9e63ecca5f42d9c8ce9d10ded80d818d53f83189e7bda3e055bdce6ee244c2b20c798ef0226f547d2d28e19c89ed12a710df466bc39dea261f8b86e11a52311d53bc4d52c3a9425f90086d4c2624906497e913b0ac972b8a4f9423a406de462302dcf9aa66a45bf6d31bf589f90d8200113c086f78800e6816d7cf8f875ab8460afe5fc21d0c0fac625ce62d041c31f92ced60820408ed22917bfbcb1387", 0xf3}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="50018bfd7300010000099750b496c0ba83c70108c4880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000008003800000000008784ce9f357d00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x168, 0x20088080}, 0x11) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7681b961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 21:00:55 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x8100}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) 21:00:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x2000000}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 2036.296156] FAULT_INJECTION: forcing a failure. [ 2036.296156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2036.297739] CPU: 1 PID: 11248 Comm: syz-executor.7 Not tainted 5.10.238 #1 [ 2036.298552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.299520] Call Trace: [ 2036.299832] dump_stack+0x107/0x167 [ 2036.300257] should_fail.cold+0x5/0xa [ 2036.300725] _copy_to_user+0x2e/0x180 [ 2036.301163] simple_read_from_buffer+0xcc/0x160 [ 2036.301710] proc_fail_nth_read+0x198/0x230 [ 2036.302214] ? proc_sessionid_read+0x230/0x230 [ 2036.302750] ? security_file_permission+0xb1/0xe0 [ 2036.303317] ? proc_sessionid_read+0x230/0x230 [ 2036.303853] vfs_read+0x228/0x620 [ 2036.304262] ksys_read+0x12d/0x260 [ 2036.304685] ? vfs_write+0xb10/0xb10 [ 2036.305125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2036.305739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.306337] do_syscall_64+0x33/0x40 [ 2036.306771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2036.307369] RIP: 0033:0x7fdd5d65e69c [ 2036.307805] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2036.309950] RSP: 002b:00007fdd5ac21170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2036.310842] RAX: ffffffffffffffda RBX: 000000000000030e RCX: 00007fdd5d65e69c [ 2036.311674] RDX: 000000000000000f RSI: 00007fdd5ac211e0 RDI: 0000000000000007 [ 2036.312504] RBP: 00007fdd5ac211d0 R08: 0000000000000000 R09: 0000000000000000 [ 2036.313355] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2036.314190] R13: 00007ffdeef2ec4f R14: 00007fdd5ac21300 R15: 0000000000022000 21:00:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x100000000, 0x80) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000380)={0x0, 0x10, 0x1, @thr={&(0x7f0000000180)="79adc7926346722a398ebe6673afe8af5e2d74160957f0cb20f509a3b160fb220d52a07eb2be", &(0x7f0000000300)="1d68202e97cb17a10c0e34ed22c23ec122d317f3707ac66010735592403c3f7618d9772d084625ea3e52a9dcc1646f04bc270f4d11151e85b3270f050992fcc410fcb69284c289eafd4a7820df824346c217661fee6266bf227ffc1885e811f32b"}}, &(0x7f00000003c0)) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x16, 0xd01}, 0x14}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) [ 2036.324741] FAULT_INJECTION: forcing a failure. [ 2036.324741] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.327789] CPU: 0 PID: 11243 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2036.329328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.331155] Call Trace: [ 2036.331742] dump_stack+0x107/0x167 [ 2036.332559] should_fail.cold+0x5/0xa [ 2036.333403] ? create_object.isra.0+0x3a/0xa20 [ 2036.334414] should_failslab+0x5/0x20 [ 2036.335258] kmem_cache_alloc+0x5b/0x310 [ 2036.336157] ? mark_held_locks+0x9e/0xe0 [ 2036.337066] create_object.isra.0+0x3a/0xa20 [ 2036.338028] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2036.339149] kmem_cache_alloc_bulk+0x168/0x320 [ 2036.340168] io_submit_sqes+0x6fe6/0x8610 [ 2036.341111] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2036.342200] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2036.343258] ? find_held_lock+0x2c/0x110 [ 2036.344149] ? io_submit_sqes+0x8610/0x8610 [ 2036.345108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2036.346163] ? wait_for_completion_io+0x270/0x270 [ 2036.347219] ? rcu_read_lock_any_held+0x75/0xa0 [ 2036.348233] ? vfs_write+0x354/0xb10 [ 2036.349059] ? fput_many+0x2f/0x1a0 [ 2036.349858] ? ksys_write+0x1a9/0x260 [ 2036.350694] ? __ia32_sys_read+0xb0/0xb0 [ 2036.351586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2036.352742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.353874] do_syscall_64+0x33/0x40 [ 2036.354690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2036.355807] RIP: 0033:0x7f58d5fcbb19 [ 2036.356640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2036.360679] RSP: 002b:00007f58d3541188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2036.362346] RAX: ffffffffffffffda RBX: 00007f58d60def60 RCX: 00007f58d5fcbb19 [ 2036.363919] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2036.365499] RBP: 00007f58d35411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2036.367073] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 2036.368654] R13: 00007ffd40a872ef R14: 00007f58d3541300 R15: 0000000000022000 21:00:55 executing program 0: timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0xc00e}, 0x14}}, 0x0) fcntl$dupfd(r1, 0x406, r1) timer_gettime(r0, &(0x7f0000000080)) [ 2048.697772] systemd-timesyn invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2048.699264] CPU: 0 PID: 130 Comm: systemd-timesyn Not tainted 5.10.238 #1 [ 2048.700094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.701104] Call Trace: [ 2048.701417] dump_stack+0x107/0x167 [ 2048.701858] dump_header+0x107/0x689 [ 2048.702305] oom_kill_process.cold+0x10/0x15 [ 2048.702836] out_of_memory+0x1149/0x1440 [ 2048.703323] ? oom_killer_disable+0x280/0x280 [ 2048.703856] ? mutex_trylock+0x237/0x2b0 [ 2048.704342] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 2048.705060] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 2048.705767] ? lock_acquire+0x177/0x470 [ 2048.706246] ? warn_alloc+0x190/0x190 [ 2048.706712] __alloc_pages_nodemask+0x51d/0x600 [ 2048.707266] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2048.707980] ? find_get_entry+0x2c8/0x740 [ 2048.708482] alloc_pages_current+0x187/0x280 [ 2048.709006] __page_cache_alloc+0x2d2/0x360 [ 2048.709518] pagecache_get_page+0x2c7/0xc80 [ 2048.710031] filemap_fault+0x177d/0x2210 [ 2048.710521] ? read_cache_page_gfp+0x30/0x30 [ 2048.711044] ? replace_page_cache_page+0x1200/0x1200 [ 2048.711651] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2048.712272] ext4_filemap_fault+0x87/0xc0 [ 2048.712771] __do_fault+0x113/0x410 [ 2048.713206] handle_mm_fault+0x1e53/0x3500 [ 2048.713721] ? __pmd_alloc+0x5e0/0x5e0 [ 2048.714188] ? vmacache_find+0x55/0x2a0 [ 2048.714666] ? vmacache_update+0xce/0x140 [ 2048.715167] do_user_addr_fault+0x56e/0xc60 [ 2048.715689] exc_page_fault+0xa2/0x1a0 [ 2048.716153] ? asm_exc_page_fault+0x8/0x30 [ 2048.716652] asm_exc_page_fault+0x1e/0x30 [ 2048.717154] RIP: 0033:0x7ff066fe5116 [ 2048.717599] Code: Unable to access opcode bytes at RIP 0x7ff066fe50ec. [ 2048.718380] RSP: 002b:00007ffdf252b350 EFLAGS: 00010293 [ 2048.719021] RAX: 0000000000000001 RBX: 0000555e37b93310 RCX: 00007ff066fe5116 [ 2048.719870] RDX: 0000000000000008 RSI: 0000555e37b98ea0 RDI: 0000000000000004 [ 2048.720721] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000555e37b92b60 [ 2048.721561] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 2048.722407] R13: 0000000000000008 R14: 0000000000000065 R15: 0000000000000000 [ 2048.723330] Mem-Info: [ 2048.723657] active_anon:1165 inactive_anon:61597 isolated_anon:0 [ 2048.723657] active_file:2 inactive_file:2 isolated_file:0 [ 2048.723657] unevictable:4 dirty:0 writeback:0 [ 2048.723657] slab_reclaimable:8541 slab_unreclaimable:256515 [ 2048.723657] mapped:69634 shmem:116 pagetables:1697 bounce:0 [ 2048.723657] free:2839 free_pcp:58 free_cma:0 [ 2048.727381] Node 0 active_anon:4660kB inactive_anon:246388kB active_file:8kB inactive_file:8kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4352kB all_unreclaimable? yes [ 2048.730118] Node 0 DMA free:6460kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.733306] lowmem_reserve[]: 0 1616 1616 1616 [ 2048.733897] Node 0 DMA32 free:5296kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:4660kB inactive_anon:246388kB active_file:8kB inactive_file:8kB unevictable:16kB writepending:0kB present:2080640kB managed:1660452kB mlocked:16kB pagetables:6788kB bounce:0kB free_pcp:264kB local_pcp:72kB free_cma:0kB [ 2048.737366] lowmem_reserve[]: 0 0 0 0 [ 2048.737868] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6460kB [ 2048.739582] Node 0 DMA32: 1146*4kB (UM) 43*8kB (UM) 1*16kB (U) 11*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5296kB [ 2048.741215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.742247] 121 total pagecache pages [ 2048.742721] 0 pages in swap cache [ 2048.743134] Swap cache stats: add 0, delete 0, find 0/0 [ 2048.743791] Free swap = 0kB [ 2048.744154] Total swap = 0kB [ 2048.744532] 524158 pages RAM [ 2048.744901] 0 pages HighMem/MovableOnly [ 2048.745373] 105068 pages reserved [ 2048.745838] Unreclaimable slab info: [ 2048.746447] Name Used Total [ 2048.747143] pid_2 61KB 67KB [ 2048.747815] IEEE-802.15.4-MAC 63KB 63KB [ 2048.748471] IEEE-802.15.4-RAW 63KB 63KB [ 2048.749123] p9_req_t 4KB 4KB [ 2048.749789] fib6_nodes 28KB 28KB [ 2048.750451] ip6_dst_cache 37KB 37KB [ 2048.751088] PINGv6 63KB 63KB [ 2048.751741] RAWv6 283KB 283KB [ 2048.752381] UDPLITEv6 62KB 62KB [ 2048.753040] UDPv6 62KB 62KB [ 2048.753696] tw_sock_TCPv6 7KB 7KB [ 2048.754331] TCPv6 62KB 62KB [ 2048.754988] scsi_sense_cache 8KB 8KB [ 2048.755644] sd_ext_cdb 3KB 3KB [ 2048.756283] virtio_scsi_cmd 16KB 16KB [ 2048.756952] sgpool-128 89KB 89KB [ 2048.757608] sgpool-64 63KB 63KB [ 2048.758245] sgpool-32 78KB 78KB [ 2048.759739] sgpool-16 90KB 90KB [ 2048.760390] sgpool-8 48KB 48KB [ 2048.761133] io_kiocb 546KB 558KB [ 2048.761789] mqueue_inode_cache 62KB 62KB [ 2048.762449] nfs_commit_data 15KB 15KB [ 2048.763084] nfs_write_data 47KB 47KB [ 2048.763740] jbd2_inode 11KB 11KB [ 2048.764376] ext4_system_zone 7KB 7KB [ 2048.765039] ext4_io_end_vec 7KB 7KB [ 2048.765697] ext4_bio_post_read_ctx 15KB 15KB [ 2048.766390] kioctx 15KB 15KB [ 2048.767041] aio_kiocb 7KB 7KB [ 2048.767693] bio-2 4KB 4KB [ 2048.768330] fasync_cache 7KB 7KB [ 2048.768988] pid_namespace 7KB 7KB [ 2048.769640] posix_timers_cache 23KB 23KB [ 2048.770292] rpc_buffers 31KB 31KB [ 2048.770946] rpc_tasks 3KB 3KB [ 2048.771599] UNIX 320KB 320KB [ 2048.772238] ip4-frags 7KB 7KB [ 2048.772898] UDP-Lite 31KB 31KB [ 2048.773551] tcp_bind_bucket 8KB 8KB [ 2048.774183] inet_peer_cache 4KB 4KB [ 2048.774840] xfrm_state 16KB 16KB [ 2048.775493] ip_fib_trie 8KB 8KB [ 2048.776132] ip_fib_alias 15KB 15KB [ 2048.776792] ip_dst_cache 45KB 52KB [ 2048.777453] RAW 62KB 62KB [ 2048.778088] UDP 134KB 315KB [ 2048.778739] request_sock_TCP 15KB 15KB [ 2048.779378] TCP 60KB 60KB [ 2048.780035] hugetlbfs_inode_cache 30KB 30KB [ 2048.780737] bio-1 11KB 11KB [ 2048.781381] eventpoll_pwq 19KB 19KB [ 2048.782030] eventpoll_epi 47KB 47KB [ 2048.782689] inotify_inode_mark 125KB 125KB [ 2048.783335] request_queue 60KB 60KB [ 2048.783958] blkdev_ioc 22KB 22KB [ 2048.784579] bio-0 76KB 76KB [ 2048.785224] biovec-max 862KB 862KB [ 2048.785878] biovec-64 47KB 126KB [ 2048.786526] biovec-16 93KB 93KB [ 2048.787161] uid_cache 8KB 8KB [ 2048.787813] dmaengine-unmap-2 4KB 4KB [ 2048.788467] audit_buffer 7KB 7KB [ 2048.789111] skbuff_fclone_cache 127KB 127KB [ 2048.789796] skbuff_head_cache 965KB 1095KB [ 2048.790457] file_lock_cache 70KB 70KB [ 2048.791096] file_lock_ctx 7KB 7KB [ 2048.791750] fsnotify_mark_connector 44KB 44KB [ 2048.792465] net_namespace 115KB 115KB [ 2048.793110] task_delay_info 98KB 123KB [ 2048.793769] taskstats 54KB 54KB [ 2048.794424] proc_dir_entry 406KB 420KB [ 2048.795060] pde_opener 31KB 31KB [ 2048.795712] seq_file 49KB 56KB [ 2048.796349] sigqueue 110KB 110KB [ 2048.797019] shmem_inode_cache 1214KB 1320KB [ 2048.797675] kernfs_iattrs_cache 219KB 219KB [ 2048.798330] kernfs_node_cache 5360KB 5369KB [ 2048.798986] mnt_cache 189KB 189KB [ 2048.799664] filp 1532KB 2040KB [ 2048.800326] names_cache 9851KB 11751KB [ 2048.800992] hashtab_node 278KB 278KB [ 2048.801644] ebitmap_node 1149KB 1149KB [ 2048.802279] avtab_node 4976KB 4976KB [ 2048.802939] avc_node 31KB 31KB [ 2048.803610] lsm_inode_cache 3216KB 3281KB [ 2048.804247] lsm_file_cache 196KB 200KB [ 2048.804906] key_jar 31KB 31KB [ 2048.805561] uts_namespace 15KB 15KB [ 2048.806196] nsproxy 11KB 11KB [ 2048.806874] vm_area_struct 1014KB 1272KB [ 2048.807524] fs_cache 72KB 72KB [ 2048.808167] files_cache 172KB 223KB [ 2048.808830] signal_cache 364KB 432KB [ 2048.809488] sighand_cache 335KB 390KB [ 2048.810129] task_struct 1233KB 1627KB [ 2048.810784] cred_jar 140KB 176KB [ 2048.811447] anon_vma_chain 211KB 318KB [ 2048.812088] anon_vma 269KB 306KB [ 2048.812758] pid 51KB 67KB [ 2048.813411] Acpi-Operand 108KB 134KB [ 2048.814050] Acpi-ParseExt 27KB 27KB [ 2048.814704] Acpi-Parse 173KB 189KB [ 2048.815344] Acpi-State 200KB 216KB [ 2048.815998] Acpi-Namespace 24KB 24KB [ 2048.816653] numa_policy 3KB 3KB [ 2048.817293] trace_event_file 176KB 176KB [ 2048.817944] ftrace_event_field 280KB 280KB [ 2048.818607] pool_workqueue 40KB 40KB [ 2048.819242] task_group 16KB 16KB [ 2048.819901] mm_struct 308KB 378KB [ 2048.820556] vmap_area 767KB 767KB [ 2048.821200] page->ptl 217KB 275KB [ 2048.821853] kmemleak_scan_area 386KB 386KB [ 2048.822568] kmemleak_object 784148KB 784495KB [ 2048.823210] kmalloc-8k 4656KB 4800KB [ 2048.823881] kmalloc-4k 6712KB 8064KB [ 2048.824543] kmalloc-2k 4312KB 4736KB [ 2048.825197] kmalloc-1k 2334KB 3360KB [ 2048.825857] kmalloc-512 27913KB 27932KB [ 2048.826516] kmalloc-256 1178KB 1232KB [ 2048.827153] kmalloc-192 516KB 524KB [ 2048.827821] kmalloc-128 496KB 692KB [ 2048.828490] kmalloc-96 471KB 644KB [ 2048.829149] kmalloc-64 1136KB 1348KB [ 2048.829802] kmalloc-32 93988KB 93988KB [ 2048.830457] kmalloc-16 333KB 360KB [ 2048.831093] kmalloc-8 342KB 342KB [ 2048.831752] kmem_cache_node 47KB 47KB [ 2048.832391] kmem_cache 75KB 75KB [ 2048.832646] syz-executor.6: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 2048.833048] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset= [ 2048.835221] ,cpuset= [ 2048.836379] /,mems_allowed=0,global_oom,task_memcg= [ 2048.836860] syz6 [ 2048.838146] /system.slice/systemd-timesyncd.service [ 2048.838189] ,mems_allowed=0 [ 2048.838412] ,task=systemd-timesyn,pid=130,uid=101 [ 2048.839287] Out of memory (oom_kill_allocating_task): Killed process 130 (systemd-timesyn) total-vm:88376kB, anon-rss:692kB, file-rss:0kB, shmem-rss:0kB, UID:101 pgtables:76kB oom_score_adj:0 [ 2048.839984] [ 2048.840006] CPU: 1 PID: 11251 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2048.840018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.840025] Call Trace: [ 2048.840054] dump_stack+0x107/0x167 [ 2048.850323] warn_alloc.cold+0x95/0x18a [ 2048.851212] ? zone_watermark_ok_safe+0x260/0x260 [ 2048.852284] ? schedule_timeout+0x1ce/0x380 [ 2048.853244] ? usleep_range+0x170/0x170 [ 2048.854129] ? __next_timer_interrupt+0x2c0/0x2c0 [ 2048.855193] ? 0xffffffff81000000 [ 2048.855977] __alloc_pages_slowpath.constprop.0+0x1cbe/0x2200 [ 2048.857294] ? lock_acquire+0x177/0x470 [ 2048.858180] ? warn_alloc+0x190/0x190 [ 2048.859048] __alloc_pages_nodemask+0x51d/0x600 [ 2048.860084] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2048.861444] alloc_pages_current+0x187/0x280 [ 2048.862425] allocate_slab+0x29b/0x380 [ 2048.863293] ___slab_alloc+0x470/0x700 [ 2048.864160] ? io_issue_sqe+0x2492/0x77b0 [ 2048.865091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.866251] ? trace_hardirqs_on+0x5b/0x180 [ 2048.867209] ? io_issue_sqe+0x2492/0x77b0 [ 2048.868131] ? kmem_cache_alloc_trace+0x305/0x320 [ 2048.869205] kmem_cache_alloc_trace+0x305/0x320 [ 2048.870241] io_issue_sqe+0x2492/0x77b0 [ 2048.871141] ? io_connect+0x610/0x610 [ 2048.871985] ? mark_lock+0xf5/0x2df0 [ 2048.872824] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2048.873985] ? lock_chain_count+0x20/0x20 [ 2048.874903] ? io_dismantle_req+0xdf/0x180 [ 2048.875849] __io_queue_sqe+0x90/0x9d0 [ 2048.876727] ? io_issue_sqe+0x77b0/0x77b0 [ 2048.877650] ? mark_held_locks+0x9e/0xe0 [ 2048.878546] ? rwlock_bug.part.0+0x90/0x90 [ 2048.879490] io_req_task_submit+0xbf/0x1b0 [ 2048.880426] tctx_task_work+0x21a/0x8a0 [ 2048.881327] ? io_fallback_req_func+0x430/0x430 [ 2048.882370] task_work_run+0xe2/0x1a0 [ 2048.883221] exit_to_user_mode_prepare+0x17c/0x190 [ 2048.884310] syscall_exit_to_user_mode+0x38/0x1d0 [ 2048.885386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2048.886522] RIP: 0033:0x7fa22a0e6b19 [ 2048.887348] Code: Unable to access opcode bytes at RIP 0x7fa22a0e6aef. [ 2048.888805] RSP: 002b:00007fa22765c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2048.890491] RAX: 000000000000030e RBX: 00007fa22a1f9f60 RCX: 00007fa22a0e6b19 [ 2048.892071] RDX: 0000000000000000 RSI: 0000000000007579 RDI: 0000000000000003 [ 2048.893658] RBP: 00007fa22a140f6d R08: 0000000000000000 R09: 0000000000000000 [ 2048.895281] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2048.896873] R13: 00007fffd8268e9f R14: 00007fa22765c300 R15: 0000000000022000 [ 2048.899076] Mem-Info: [ 2048.899753] active_anon:1165 inactive_anon:61597 isolated_anon:0 [ 2048.899753] active_file:2 inactive_file:2 isolated_file:0 [ 2048.899753] unevictable:4 dirty:0 writeback:0 [ 2048.899753] slab_reclaimable:8541 slab_unreclaimable:256292 [ 2048.899753] mapped:69634 shmem:116 pagetables:1697 bounce:0 [ 2048.899753] free:3111 free_pcp:67 free_cma:0 [ 2048.906660] Node 0 active_anon:4660kB inactive_anon:246388kB active_file:8kB inactive_file:8kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4320kB all_unreclaimable? yes [ 2048.911697] Node 0 DMA free:6460kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.917423] lowmem_reserve[]: 0 1616 1616 1616 [ 2048.918495] Node 0 DMA32 free:5984kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:4660kB inactive_anon:246388kB active_file:8kB inactive_file:8kB unevictable:16kB writepending:0kB present:2080640kB managed:1660452kB mlocked:16kB pagetables:6788kB bounce:0kB free_pcp:268kB local_pcp:192kB free_cma:0kB [ 2048.924794] lowmem_reserve[]: 0 0 0 0 [ 2048.925698] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6460kB [ 2048.928748] Node 0 DMA32: 1146*4kB (UM) 45*8kB (UM) 1*16kB (U) 32*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5984kB [ 2048.931725] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2048.933603] 121 total pagecache pages [ 2048.934464] 0 pages in swap cache [ 2048.935221] Swap cache stats: add 0, delete 0, find 0/0 [ 2048.936422] Free swap = 0kB [ 2048.937092] Total swap = 0kB [ 2048.937789] 524158 pages RAM [ 2048.938481] 0 pages HighMem/MovableOnly [ 2048.939342] 105068 pages reserved [ 2048.940181] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2048.941972] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2048.943910] node 0: slabs: 23497, objs: 1503808, free: 0 [ 2049.021698] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2049.023393] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2049.025220] node 0: slabs: 23497, objs: 1503808, free: 0 [ 2049.201019] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2049.203070] CPU: 1 PID: 281 Comm: syz-fuzzer Not tainted 5.10.238 #1 [ 2049.204397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.206100] Call Trace: [ 2049.206636] dump_stack+0x107/0x167 [ 2049.207403] dump_header+0x107/0x689 [ 2049.208180] oom_kill_process.cold+0x10/0x15 [ 2049.209096] out_of_memory+0x1149/0x1440 [ 2049.209931] ? oom_killer_disable+0x280/0x280 [ 2049.210887] ? mutex_trylock+0x237/0x2b0 [ 2049.211710] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 2049.212991] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 2049.214210] ? lock_acquire+0x177/0x470 [ 2049.215066] ? warn_alloc+0x190/0x190 [ 2049.215869] __alloc_pages_nodemask+0x51d/0x600 [ 2049.216873] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2049.218107] ? find_get_entry+0x2c8/0x740 [ 2049.219001] alloc_pages_current+0x187/0x280 [ 2049.219916] __page_cache_alloc+0x2d2/0x360 [ 2049.220849] pagecache_get_page+0x2c7/0xc80 [ 2049.221735] filemap_fault+0x177d/0x2210 [ 2049.222612] ? read_cache_page_gfp+0x30/0x30 [ 2049.223517] ? replace_page_cache_page+0x1200/0x1200 [ 2049.224598] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2049.225687] ext4_filemap_fault+0x87/0xc0 [ 2049.226572] __do_fault+0x113/0x410 [ 2049.227321] handle_mm_fault+0x1e53/0x3500 [ 2049.228235] ? ep_read_events_proc+0x3d0/0x3d0 [ 2049.229178] ? __pmd_alloc+0x5e0/0x5e0 [ 2049.230010] ? vmacache_find+0x55/0x2a0 [ 2049.230837] do_user_addr_fault+0x56e/0xc60 [ 2049.231769] exc_page_fault+0xa2/0x1a0 [ 2049.232578] ? asm_exc_page_fault+0x8/0x30 [ 2049.233486] asm_exc_page_fault+0x1e/0x30 [ 2049.234325] RIP: 0033:0x4666e0 [ 2049.235011] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 2049.236249] RSP: 002b:000000c0003257f0 EFLAGS: 00010246 [ 2049.237398] RAX: 0000000000000000 RBX: 00000000000003e2 RCX: 00000000004666e0 [ 2049.238938] RDX: 0000000000000080 RSI: 000000c000325840 RDI: 0000000000000003 [ 2049.240476] RBP: 000000c000325e40 R08: 0000000000000000 R09: 0000000000000000 [ 2049.242016] R10: 00000000000003e2 R11: 0000000000000246 R12: 0000000000000003 [ 2049.243530] R13: 000000c0000ac900 R14: 0000000000000004 R15: 0000000000000000 [ 2049.245146] Mem-Info: [ 2049.245722] active_anon:1165 inactive_anon:61597 isolated_anon:0 [ 2049.245722] active_file:2 inactive_file:3 isolated_file:0 [ 2049.245722] unevictable:4 dirty:0 writeback:0 [ 2049.245722] slab_reclaimable:8533 slab_unreclaimable:256322 [ 2049.245722] mapped:69634 shmem:116 pagetables:1697 bounce:0 [ 2049.245722] free:3089 free_pcp:43 free_cma:0 [ 2049.252309] Node 0 active_anon:4660kB inactive_anon:246388kB active_file:8kB inactive_file:12kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:464kB writeback_tmp:0kB kernel_stack:4320kB all_unreclaimable? yes [ 2049.257155] Node 0 DMA free:6460kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2049.262583] lowmem_reserve[]: 0 1616 1616 1616 [ 2049.263607] Node 0 DMA32 free:5896kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:4660kB inactive_anon:246388kB active_file:8kB inactive_file:12kB unevictable:16kB writepending:0kB present:2080640kB managed:1660452kB mlocked:16kB pagetables:6788kB bounce:0kB free_pcp:172kB local_pcp:96kB free_cma:0kB [ 2049.269612] lowmem_reserve[]: 0 0 0 0 [ 2049.270465] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6460kB [ 2049.273894] Node 0 DMA32: 1146*4kB (UM) 40*8kB (UM) 0*16kB 29*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5832kB [ 2049.276738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2049.278567] 121 total pagecache pages [ 2049.279372] 0 pages in swap cache [ 2049.280133] Swap cache stats: add 0, delete 0, find 0/0 [ 2049.281294] Free swap = 0kB [ 2049.281971] Total swap = 0kB [ 2049.282636] 524158 pages RAM [ 2049.283267] 0 pages HighMem/MovableOnly [ 2049.284127] 105068 pages reserved [ 2049.284893] Unreclaimable slab info: [ 2049.285709] Name Used Total [ 2049.286904] pid_2 61KB 67KB [ 2049.288057] IEEE-802.15.4-MAC 63KB 63KB [ 2049.289221] IEEE-802.15.4-RAW 63KB 63KB [ 2049.290378] p9_req_t 4KB 4KB [ 2049.291541] fib6_nodes 28KB 28KB [ 2049.292703] ip6_dst_cache 37KB 37KB [ 2049.293856] PINGv6 63KB 63KB [ 2049.295010] RAWv6 283KB 283KB [ 2049.296167] UDPLITEv6 62KB 62KB [ 2049.297339] UDPv6 62KB 62KB [ 2049.298487] tw_sock_TCPv6 7KB 7KB [ 2049.299635] TCPv6 62KB 62KB [ 2049.300803] scsi_sense_cache 8KB 8KB [ 2049.301958] sd_ext_cdb 3KB 3KB [ 2049.303121] virtio_scsi_cmd 16KB 16KB [ 2049.304287] sgpool-128 89KB 89KB [ 2049.305451] sgpool-64 63KB 63KB [ 2049.306605] sgpool-32 78KB 78KB [ 2049.307761] sgpool-16 90KB 90KB [ 2049.308923] sgpool-8 48KB 48KB [ 2049.310080] io_kiocb 544KB 558KB [ 2049.311246] mqueue_inode_cache 62KB 62KB [ 2049.312429] nfs_commit_data 15KB 15KB [ 2049.313593] nfs_write_data 47KB 47KB [ 2049.314733] jbd2_inode 11KB 11KB [ 2049.315863] ext4_system_zone 7KB 7KB [ 2049.317034] ext4_io_end_vec 7KB 7KB [ 2049.318190] ext4_bio_post_read_ctx 15KB 15KB [ 2049.319445] kioctx 15KB 15KB [ 2049.320596] aio_kiocb 7KB 7KB [ 2049.321763] bio-2 4KB 4KB [ 2049.322921] fasync_cache 7KB 7KB [ 2049.324073] pid_namespace 7KB 7KB [ 2049.325238] posix_timers_cache 23KB 23KB [ 2049.326432] rpc_buffers 31KB 31KB [ 2049.327583] rpc_tasks 3KB 3KB [ 2049.328747] UNIX 320KB 320KB [ 2049.329891] ip4-frags 7KB 7KB [ 2049.331052] UDP-Lite 31KB 31KB [ 2049.332211] tcp_bind_bucket 8KB 8KB [ 2049.333384] inet_peer_cache 4KB 4KB [ 2049.334543] xfrm_state 16KB 16KB [ 2049.335708] ip_fib_trie 8KB 8KB [ 2049.336877] ip_fib_alias 15KB 15KB [ 2049.338038] ip_dst_cache 45KB 52KB [ 2049.339195] RAW 62KB 62KB [ 2049.340355] UDP 134KB 315KB [ 2049.341512] request_sock_TCP 15KB 15KB [ 2049.342655] TCP 60KB 60KB [ 2049.343792] hugetlbfs_inode_cache 30KB 30KB [ 2049.345016] bio-1 11KB 11KB [ 2049.346149] eventpoll_pwq 19KB 19KB [ 2049.347282] eventpoll_epi 47KB 47KB [ 2049.348442] inotify_inode_mark 125KB 125KB [ 2049.349625] request_queue 60KB 60KB [ 2049.350757] blkdev_ioc 22KB 22KB [ 2049.351905] bio-0 76KB 76KB [ 2049.353046] biovec-max 862KB 862KB [ 2049.354189] biovec-64 47KB 126KB [ 2049.355322] biovec-16 93KB 93KB [ 2049.356460] uid_cache 8KB 8KB [ 2049.357607] dmaengine-unmap-2 4KB 4KB [ 2049.358764] audit_buffer 7KB 7KB [ 2049.359903] skbuff_fclone_cache 127KB 127KB [ 2049.361112] skbuff_head_cache 987KB 1095KB [ 2049.362277] file_lock_cache 70KB 70KB [ 2049.363435] file_lock_ctx 7KB 7KB [ 2049.364593] fsnotify_mark_connector 44KB 44KB [ 2049.365869] net_namespace 115KB 115KB [ 2049.367027] task_delay_info 98KB 123KB [ 2049.368191] taskstats 54KB 54KB [ 2049.369355] proc_dir_entry 406KB 420KB [ 2049.370513] pde_opener 31KB 31KB [ 2049.371650] seq_file 49KB 56KB [ 2049.372807] sigqueue 110KB 110KB [ 2049.373971] shmem_inode_cache 1214KB 1320KB [ 2049.375125] kernfs_iattrs_cache 219KB 219KB [ 2049.376317] kernfs_node_cache 5360KB 5369KB [ 2049.377463] mnt_cache 189KB 189KB [ 2049.378626] filp 1450KB 2025KB [ 2049.379795] names_cache 9371KB 11215KB [ 2049.380942] hashtab_node 278KB 278KB [ 2049.382084] ebitmap_node 1149KB 1149KB [ 2049.383236] avtab_node 4976KB 4976KB [ 2049.384379] avc_node 31KB 31KB [ 2049.385552] lsm_inode_cache 3216KB 3281KB [ 2049.386690] lsm_file_cache 196KB 200KB [ 2049.387839] key_jar 31KB 31KB [ 2049.389004] uts_namespace 15KB 15KB [ 2049.390164] nsproxy 11KB 11KB [ 2049.391351] vm_area_struct 994KB 1268KB [ 2049.392512] fs_cache 72KB 72KB [ 2049.393674] files_cache 172KB 223KB [ 2049.394832] signal_cache 364KB 432KB [ 2049.395996] sighand_cache 335KB 390KB [ 2049.397155] task_struct 1220KB 1627KB [ 2049.398313] cred_jar 140KB 176KB [ 2049.399489] anon_vma_chain 209KB 318KB [ 2049.400646] anon_vma 269KB 306KB [ 2049.401798] pid 51KB 67KB [ 2049.402953] Acpi-Operand 108KB 134KB [ 2049.404110] Acpi-ParseExt 27KB 27KB [ 2049.405273] Acpi-Parse 173KB 189KB [ 2049.406429] Acpi-State 200KB 216KB [ 2049.407582] Acpi-Namespace 24KB 24KB [ 2049.408745] numa_policy 3KB 3KB [ 2049.409878] trace_event_file 176KB 176KB [ 2049.411034] ftrace_event_field 280KB 280KB [ 2049.412208] pool_workqueue 40KB 40KB [ 2049.413373] task_group 16KB 16KB [ 2049.414535] mm_struct 308KB 378KB [ 2049.415694] vmap_area 767KB 767KB [ 2049.416871] page->ptl 217KB 275KB [ 2049.418030] kmemleak_scan_area 386KB 386KB [ 2049.419218] kmemleak_object 784593KB 784593KB [ 2049.420386] kmalloc-8k 4656KB 4800KB [ 2049.421576] kmalloc-4k 6688KB 8032KB [ 2049.422737] kmalloc-2k 4304KB 4736KB [ 2049.423910] kmalloc-1k 2334KB 3360KB [ 2049.425073] kmalloc-512 28060KB 28060KB [ 2049.426242] kmalloc-256 1178KB 1232KB [ 2049.427396] kmalloc-192 516KB 524KB [ 2049.428575] kmalloc-128 496KB 692KB [ 2049.429732] kmalloc-96 471KB 644KB [ 2049.430896] kmalloc-64 1135KB 1348KB [ 2049.432059] kmalloc-32 94068KB 94068KB [ 2049.433203] kmalloc-16 333KB 360KB [ 2049.434350] kmalloc-8 342KB 342KB [ 2049.435492] kmem_cache_node 47KB 47KB [ 2049.436628] kmem_cache 75KB 75KB [ 2049.437779] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=281,uid=0 [ 2049.441032] Out of memory (oom_kill_allocating_task): Killed process 261 (syz-fuzzer) total-vm:1240084kB, anon-rss:215016kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:928kB oom_score_adj:0 [ 2050.016594] oom_reaper: reaped process 11262 (syz-executor.6), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB VM DIAGNOSIS: 21:01:11 Registers: info registers vcpu 0 RAX=0000000080010004 RBX=ffff88800f4c0000 RCX=ffffffff81f49aa4 RDX=000000000000c062 RSI=ffffffff81f49ab2 RDI=0000000000000007 RBP=000000000001c062 RSP=ffff88806ce09db0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffffffff853a0240 R13=ffff88800f4c4338 R14=0000000000000000 R15=ffff88800f4c0008 RIP=ffffffff81f49ab6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f99bd7406e0 CR3=0000000009cc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e7061727762696c2f756e672d78 XMM02=00302e6f732e7061727762696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000020 RCX=0000000000000001 RDX=1ffffffff0a13edc RSI=0000000000000170 RDI=ffff88804897139c RBP=ffff88800804d640 RSP=ffff88800df37a38 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff816f82ea R13=0000000000400cc0 R14=0000000000092cc0 R15=0000000000092cc0 RIP=ffffffff815d0a55 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa22763b700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fad3cf89f00 CR3=000000000f68e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d3d XMM01=0000000000000000343d595449524f49 XMM02=ffffffffffffffffffffffffffffffff XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=000055708ea9b3500000000000000016 XMM05=ffff000000000000ffffffffffffffff XMM06=000055708ea8b0100000000000000000 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000020200000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000