0000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) [ 2207.780550] FAULT_INJECTION: forcing a failure. [ 2207.780550] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.782017] CPU: 1 PID: 11524 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2207.782884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.783910] Call Trace: [ 2207.784246] dump_stack+0x107/0x167 [ 2207.784705] should_fail.cold+0x5/0xa [ 2207.785180] ? __io_queue_sqe+0x666/0x9d0 [ 2207.785698] should_failslab+0x5/0x20 [ 2207.786170] kmem_cache_alloc_trace+0x55/0x320 [ 2207.786740] ? lock_downgrade+0x6d0/0x6d0 [ 2207.787255] __io_queue_sqe+0x666/0x9d0 [ 2207.787751] ? io_issue_sqe+0x77d0/0x77d0 [ 2207.788265] ? __fget_files+0x2f8/0x520 [ 2207.788759] ? io_prep_rw+0x7f5/0x1050 [ 2207.789244] io_submit_sqes+0x44ab/0x8610 [ 2207.789785] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2207.790397] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2207.791001] ? find_held_lock+0x2c/0x110 [ 2207.791512] ? io_submit_sqes+0x8610/0x8610 [ 2207.792049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2207.792655] ? wait_for_completion_io+0x270/0x270 [ 2207.793253] ? rcu_read_lock_any_held+0x75/0xa0 [ 2207.793836] ? vfs_write+0x354/0xb10 [ 2207.794296] ? fput_many+0x2f/0x1a0 [ 2207.794747] ? ksys_write+0x1a9/0x260 [ 2207.795221] ? __ia32_sys_read+0xb0/0xb0 [ 2207.795728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.796376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.797013] do_syscall_64+0x33/0x40 [ 2207.797473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.798120] RIP: 0033:0x7fe1da102b19 [ 2207.798589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.800846] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2207.801787] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2207.802659] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2207.803540] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.804413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2207.805288] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2207.814762] FAULT_INJECTION: forcing a failure. [ 2207.814762] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.817261] CPU: 0 PID: 11514 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2207.818733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2207.820482] Call Trace: [ 2207.821046] dump_stack+0x107/0x167 [ 2207.821825] should_fail.cold+0x5/0xa [ 2207.822635] ? create_object.isra.0+0x3a/0xa30 [ 2207.823598] should_failslab+0x5/0x20 [ 2207.824401] kmem_cache_alloc+0x5b/0x310 [ 2207.825260] create_object.isra.0+0x3a/0xa30 [ 2207.826189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2207.827259] __kmalloc+0x16e/0x390 [ 2207.828015] io_setup_async_rw+0x180/0x580 [ 2207.828900] ? iov_iter_restore+0x195/0x3a0 [ 2207.829819] io_read+0x775/0x11e0 [ 2207.830554] ? __lock_acquire+0x1657/0x5b00 [ 2207.831466] ? kiocb_done+0xc90/0xc90 [ 2207.832262] ? mark_lock+0xf5/0x2df0 [ 2207.833049] ? lock_chain_count+0x20/0x20 [ 2207.833928] ? __lock_acquire+0x1657/0x5b00 [ 2207.834854] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2207.835951] ? lock_chain_count+0x20/0x20 [ 2207.836832] ? __lock_acquire+0xbb1/0x5b00 [ 2207.837728] io_issue_sqe+0x2e8a/0x77d0 [ 2207.838567] ? find_held_lock+0x2c/0x110 [ 2207.839423] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2207.840522] ? io_poll_remove_entries+0x30a/0x540 [ 2207.841535] ? io_connect+0x610/0x610 03:04:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) [ 2207.842345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.843612] ? lock_acquire+0x197/0x470 [ 2207.844445] ? find_held_lock+0x2c/0x110 [ 2207.845313] ? __fget_files+0x2cf/0x520 [ 2207.846167] ? lock_downgrade+0x6d0/0x6d0 [ 2207.847044] __io_queue_sqe+0x90/0x9d0 [ 2207.847869] ? io_issue_sqe+0x77d0/0x77d0 [ 2207.848737] ? __fget_files+0x2f8/0x520 [ 2207.849576] ? io_prep_rw+0x7f5/0x1050 [ 2207.850418] io_submit_sqes+0x44ab/0x8610 [ 2207.851318] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2207.852361] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2207.853377] ? find_held_lock+0x2c/0x110 [ 2207.854247] ? io_submit_sqes+0x8610/0x8610 [ 2207.855158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2207.856169] ? wait_for_completion_io+0x270/0x270 [ 2207.857187] ? rcu_read_lock_any_held+0x75/0xa0 [ 2207.858173] ? vfs_write+0x354/0xb10 [ 2207.858953] ? fput_many+0x2f/0x1a0 [ 2207.859724] ? ksys_write+0x1a9/0x260 [ 2207.860524] ? __ia32_sys_read+0xb0/0xb0 [ 2207.861386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2207.862494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2207.863576] do_syscall_64+0x33/0x40 [ 2207.864359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2207.865432] RIP: 0033:0x7f8d46f94b19 [ 2207.866225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2207.870086] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2207.871682] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2207.873174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2207.874672] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2207.876169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2207.877676] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:04:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 03:04:55 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000480), 0x4) copy_file_range(r0, &(0x7f00000000c0)=0x3, r1, &(0x7f0000000100)=0x6, 0xa267, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x67, 0x4, 0x8, 0x9, 0x8}) r2 = fsopen(&(0x7f0000000180)='qnx6\x00', 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000001c0)={0x0, 0x3f, 0x6}) 03:05:09 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 03:05:09 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 03:05:09 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) 03:05:09 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 03:05:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 03:05:09 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 03:05:09 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) 03:05:09 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x401, 0x0, 0x7fff}) [ 2221.901236] FAULT_INJECTION: forcing a failure. [ 2221.901236] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.903746] CPU: 1 PID: 11560 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2221.905208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.906976] Call Trace: [ 2221.907546] dump_stack+0x107/0x167 [ 2221.908316] should_fail.cold+0x5/0xa [ 2221.909121] ? io_poll_remove_entries+0x30a/0x540 [ 2221.910156] ? create_object.isra.0+0x3a/0xa30 [ 2221.911124] should_failslab+0x5/0x20 [ 2221.911932] kmem_cache_alloc+0x5b/0x310 [ 2221.912802] create_object.isra.0+0x3a/0xa30 [ 2221.913730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2221.914817] kmem_cache_alloc_trace+0x151/0x320 [ 2221.915807] ? lock_downgrade+0x6d0/0x6d0 [ 2221.916688] __io_queue_sqe+0x666/0x9d0 [ 2221.917545] ? io_issue_sqe+0x77d0/0x77d0 [ 2221.918487] ? __fget_files+0x2f8/0x520 [ 2221.919345] ? io_prep_rw+0x7f5/0x1050 [ 2221.920176] io_submit_sqes+0x44ab/0x8610 [ 2221.921084] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2221.922149] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2221.923170] ? find_held_lock+0x2c/0x110 [ 2221.924036] ? io_submit_sqes+0x8610/0x8610 [ 2221.924957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2221.925983] ? wait_for_completion_io+0x270/0x270 [ 2221.927007] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.927986] ? vfs_write+0x354/0xb10 [ 2221.928776] ? fput_many+0x2f/0x1a0 [ 2221.929543] ? ksys_write+0x1a9/0x260 [ 2221.930357] ? __ia32_sys_read+0xb0/0xb0 [ 2221.931221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2221.932337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.933435] do_syscall_64+0x33/0x40 [ 2221.934227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2221.935311] RIP: 0033:0x7fe1da102b19 [ 2221.936100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.940003] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2221.941623] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2221.943151] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2221.944663] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.946205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.947716] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:05:09 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/input', 0x38002, 0x2) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101900, 0x100, 0x18}, 0x18) readahead(r0, 0x6, 0x1) [ 2221.959141] FAULT_INJECTION: forcing a failure. [ 2221.959141] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.961571] CPU: 1 PID: 11564 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2221.963080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.964863] Call Trace: [ 2221.965429] dump_stack+0x107/0x167 [ 2221.966214] should_fail.cold+0x5/0xa [ 2221.967021] ? create_object.isra.0+0x3a/0xa30 [ 2221.967988] should_failslab+0x5/0x20 [ 2221.968795] kmem_cache_alloc+0x5b/0x310 [ 2221.969668] create_object.isra.0+0x3a/0xa30 [ 2221.970602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2221.971680] __kmalloc+0x16e/0x390 [ 2221.972437] io_setup_async_rw+0x180/0x580 [ 2221.973334] ? iov_iter_restore+0x195/0x3a0 [ 2221.974251] io_read+0x775/0x11e0 [ 2221.974998] ? kiocb_done+0xc90/0xc90 [ 2221.975803] ? mark_lock+0xf5/0x2df0 [ 2221.976598] ? lock_chain_count+0x20/0x20 [ 2221.977505] ? __lock_acquire+0xbb1/0x5b00 [ 2221.978410] io_issue_sqe+0x2e8a/0x77d0 [ 2221.979252] ? find_held_lock+0x2c/0x110 [ 2221.980117] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2221.981228] ? __io_arm_poll_handler+0x59b/0x9e0 [ 2221.982241] ? lock_downgrade+0x6d0/0x6d0 [ 2221.983113] ? io_connect+0x610/0x610 [ 2221.983926] ? lock_acquire+0x197/0x470 [ 2221.984767] ? find_held_lock+0x2c/0x110 [ 2221.985630] ? __fget_files+0x2cf/0x520 [ 2221.986470] ? lock_downgrade+0x6d0/0x6d0 [ 2221.987351] __io_queue_sqe+0x90/0x9d0 [ 2221.988178] ? io_issue_sqe+0x77d0/0x77d0 [ 2221.989049] ? __fget_files+0x2f8/0x520 [ 2221.989899] ? io_prep_rw+0x7f5/0x1050 [ 2221.990726] io_submit_sqes+0x44ab/0x8610 [ 2221.991639] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2221.992690] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2221.993714] ? find_held_lock+0x2c/0x110 [ 2221.994582] ? io_submit_sqes+0x8610/0x8610 [ 2221.995499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2221.996519] ? wait_for_completion_io+0x270/0x270 [ 2221.997539] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.998520] ? vfs_write+0x354/0xb10 [ 2221.999313] ? fput_many+0x2f/0x1a0 [ 2222.000085] ? ksys_write+0x1a9/0x260 [ 2222.000888] ? __ia32_sys_read+0xb0/0xb0 [ 2222.001754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.002864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.003958] do_syscall_64+0x33/0x40 [ 2222.004744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2222.005843] RIP: 0033:0x7f8d46f94b19 [ 2222.006632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.010528] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2222.012144] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2222.013664] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2222.015186] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.016681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2222.018193] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:05:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000000)="a9c59bac7cc5c09a911804b9bf8694ece13feeecbbd39f9c44dee9fca42663779b0c39971be24d73ba3204dd3955e6655cbab5b949494b99aec68b78bd1ada29fb241c184e543ef661", 0x49) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x40) fcntl$setlease(r1, 0x400, 0x0) 03:05:09 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 03:05:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 03:05:09 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 03:05:09 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 03:05:09 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 03:05:09 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x100000c, 0x50, r0, 0x10000000) r4 = syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x110, r4, 0x8000000) io_uring_enter(r4, 0x5635, 0x40b9, 0x1, &(0x7f00000000c0)={[0xb039]}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000480), 0x4) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f0000000000)="35143f4ed3547c3a662e4163685aa5468b3bd22c99dfb6d8fd06729e771c98f9c0c73d", 0x23, 0x100, 0x1}, 0x2d) [ 2222.437466] FAULT_INJECTION: forcing a failure. [ 2222.437466] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.440082] CPU: 1 PID: 11597 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2222.441529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2222.443274] Call Trace: [ 2222.443831] dump_stack+0x107/0x167 [ 2222.444602] should_fail.cold+0x5/0xa [ 2222.445402] should_failslab+0x5/0x20 [ 2222.446203] kmem_cache_alloc_bulk+0x4b/0x320 [ 2222.447143] io_submit_sqes+0x6fe7/0x8610 [ 2222.448045] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2222.449091] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2222.450114] ? find_held_lock+0x2c/0x110 [ 2222.450973] ? io_submit_sqes+0x8610/0x8610 [ 2222.451879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2222.452887] ? wait_for_completion_io+0x270/0x270 [ 2222.453907] ? rcu_read_lock_any_held+0x75/0xa0 [ 2222.454881] ? vfs_write+0x354/0xb10 [ 2222.455658] ? fput_many+0x2f/0x1a0 [ 2222.456430] ? ksys_write+0x1a9/0x260 [ 2222.457226] ? __ia32_sys_read+0xb0/0xb0 [ 2222.458084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2222.459182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2222.460269] do_syscall_64+0x33/0x40 [ 2222.461055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2222.462138] RIP: 0033:0x7fe1da102b19 [ 2222.462915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2222.466766] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2222.468376] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2222.469871] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2222.471362] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2222.472861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2222.474368] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:05:24 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 03:05:24 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 03:05:24 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 03:05:24 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7000000, 0x0, 0x0, 0x0) 03:05:24 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/video', 0x0, 0x0) 03:05:24 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) 03:05:24 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 03:05:24 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c, 0x0, 0x0, 0x0) [ 2237.582691] FAULT_INJECTION: forcing a failure. [ 2237.582691] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.585230] CPU: 1 PID: 11622 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2237.586709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.588462] Call Trace: [ 2237.589031] dump_stack+0x107/0x167 [ 2237.589812] should_fail.cold+0x5/0xa [ 2237.590629] ? create_object.isra.0+0x3a/0xa30 [ 2237.591602] should_failslab+0x5/0x20 [ 2237.592412] kmem_cache_alloc+0x5b/0x310 [ 2237.593275] create_object.isra.0+0x3a/0xa30 [ 2237.594206] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.595274] kmem_cache_alloc_bulk+0x168/0x320 [ 2237.596248] io_submit_sqes+0x6fe7/0x8610 [ 2237.597143] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.598198] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.599217] ? find_held_lock+0x2c/0x110 [ 2237.600080] ? io_submit_sqes+0x8610/0x8610 [ 2237.600993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2237.602028] ? wait_for_completion_io+0x270/0x270 [ 2237.603047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.604018] ? vfs_write+0x354/0xb10 [ 2237.604797] ? fput_many+0x2f/0x1a0 [ 2237.605564] ? ksys_write+0x1a9/0x260 [ 2237.606370] ? __ia32_sys_read+0xb0/0xb0 [ 2237.607223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.608315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.609412] do_syscall_64+0x33/0x40 [ 2237.610210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.611289] RIP: 0033:0x7fe1da102b19 [ 2237.612077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.615992] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2237.617598] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2237.619106] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2237.620618] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.622128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.623640] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:05:24 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0xd2, "744c728b24dcf1c2a381c4b581faa325dbe5007e8af28ceb06467165db80176f851ca79f29bbe38b501351bd71552b9692cda9e7a2749ff041895d52727d931086050dd11ab94afef811d4ac65b4fafa6a18074e6390b88152fc509e8ea5cb7cab8861ea29e2845f0dcf560bbb4c289108e4856f7aa5f7c407bd84bd8aac1398a1264c8a745b218acc7497a317b1a85438e0e98a94a21a902cbc6f230f55c625866d5b4a48b28764b46e929d07b7a312b49205ae6dfc1f33b426632a2c70d84f50cb77866c837a3c74587c0bf6899a92dc58"}) [ 2237.652535] FAULT_INJECTION: forcing a failure. [ 2237.652535] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.655797] CPU: 1 PID: 11625 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2237.657263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.659015] Call Trace: [ 2237.659582] dump_stack+0x107/0x167 [ 2237.660347] should_fail.cold+0x5/0xa [ 2237.661152] ? io_poll_remove_entries+0x30a/0x540 [ 2237.662179] ? create_object.isra.0+0x3a/0xa30 [ 2237.663142] should_failslab+0x5/0x20 [ 2237.663943] kmem_cache_alloc+0x5b/0x310 [ 2237.664802] create_object.isra.0+0x3a/0xa30 [ 2237.665727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2237.666812] kmem_cache_alloc_trace+0x151/0x320 [ 2237.667787] ? lock_downgrade+0x6d0/0x6d0 [ 2237.668662] __io_queue_sqe+0x666/0x9d0 [ 2237.669508] ? io_issue_sqe+0x77d0/0x77d0 [ 2237.670420] ? __fget_files+0x2f8/0x520 [ 2237.671260] ? io_prep_rw+0x7f5/0x1050 [ 2237.672088] io_submit_sqes+0x44ab/0x8610 [ 2237.672989] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.674062] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2237.675084] ? find_held_lock+0x2c/0x110 [ 2237.675942] ? io_submit_sqes+0x8610/0x8610 [ 2237.676858] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2237.677883] ? wait_for_completion_io+0x270/0x270 [ 2237.678912] ? rcu_read_lock_any_held+0x75/0xa0 [ 2237.679889] ? vfs_write+0x354/0xb10 [ 2237.680675] ? fput_many+0x2f/0x1a0 [ 2237.681452] ? ksys_write+0x1a9/0x260 [ 2237.682265] ? __ia32_sys_read+0xb0/0xb0 [ 2237.683128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2237.684244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2237.685347] do_syscall_64+0x33/0x40 [ 2237.686156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2237.687249] RIP: 0033:0x7f8d46f94b19 [ 2237.688032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.691921] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2237.693532] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2237.695044] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2237.696545] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2237.698059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.699572] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:05:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 03:05:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 03:05:25 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000180)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r2, 0x20, 0x8, 0x28b) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(r3, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x20200, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="d00000002600020027bd7000ffdbdf25170000005ddc67cf4f4fa698a5f0cb74274e1b877e66f06c39c0cc398d30590c818cab61ca0384293b3ae13ab185b74618fa73e5fa33e6530e38489424d3872c9484bdd04337d418488d44bf033667fe38b45b5032c8391145c946870bdc3d859c93251f6986cd6bc6b2d316293e3968562c5d852b07f2d4eaae776239428e5b383df3fb81863dea2d9d94ebb7290df6bbec983572c8fa0c96586957ecda8a041be4bea5f4aa41dae14a022121ef8eb024d0dcdbc08a489f64550d6f2d7e809f"], 0xd0}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000480), 0x4) sendmsg$nl_generic(r4, &(0x7f00000016c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4040090}, 0x1) r6 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpu.max\x00', 0x2, 0x0) lseek(r6, 0x1, 0x2) r7 = open(&(0x7f0000000380)='./file0\x00', 0x400000, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f00000004c0)={{r2}, 0x0, 0x0, @inherit={0x58, &(0x7f00000014c0)=ANY=[@ANYBLOB="01000000000000000200000000000000faffffffffffffff09000000000000000200000000000000010000000000000000080000000000000900000000000000000001000000000006000000000000000000000000000000123ee2d8b1660f369dbc6c66a58fc3d272d0bf2a95491c83ed31af24938e0cb3f789222be8b49edb0322d0eb0c33183ad214458df8f4a48a8cc52c372b2261c49e9b78d04279b51f8d3fdad74d115b111c3f9323e9"]}, @name="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"}) copy_file_range(r0, &(0x7f0000000000)=0x746dd9f4, r5, &(0x7f0000000040)=0xa76, 0x80000000, 0x0) 03:05:25 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 03:05:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 03:05:25 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x68, 0x0, 0x0, 0x0) 03:05:39 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 03:05:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop3', 0x484c80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/e1000e', 0x880, 0x8) 03:05:39 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c, 0x0, 0x0, 0x0) 03:05:39 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 03:05:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 03:05:39 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 03:05:39 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 03:05:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) [ 2251.957441] FAULT_INJECTION: forcing a failure. [ 2251.957441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2251.959362] CPU: 0 PID: 11669 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2251.960340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2251.961506] Call Trace: [ 2251.961879] dump_stack+0x107/0x167 [ 2251.962402] should_fail.cold+0x5/0xa [ 2251.962941] _copy_from_user+0x2e/0x1b0 [ 2251.963512] iovec_from_user+0x141/0x400 [ 2251.964093] __import_iovec+0x67/0x590 [ 2251.964635] ? kfree+0xd7/0x340 [ 2251.965110] io_import_iovec+0x581/0x1120 [ 2251.965685] ? io_link_timeout_fn+0x20/0x380 [ 2251.966319] ? io_complete_rw+0x230/0x230 [ 2251.966897] ? io_clean_op+0x30c/0x870 [ 2251.967442] ? kiocb_done+0x16b/0xc90 [ 2251.967978] io_read+0xe14/0x11e0 [ 2251.968472] ? __lock_acquire+0x1657/0x5b00 [ 2251.969077] ? kiocb_done+0xc90/0xc90 [ 2251.969607] ? mark_lock+0xf5/0x2df0 [ 2251.970139] ? lock_chain_count+0x20/0x20 [ 2251.970729] ? __lock_acquire+0x1657/0x5b00 [ 2251.971342] ? mark_lock+0xf5/0x2df0 [ 2251.971877] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2251.972621] ? lock_chain_count+0x20/0x20 [ 2251.973212] ? __lock_acquire+0xbb1/0x5b00 [ 2251.973806] io_issue_sqe+0x2e8a/0x77d0 [ 2251.974375] ? find_held_lock+0x2c/0x110 [ 2251.974949] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2251.975681] ? io_poll_remove_entries+0x30a/0x540 [ 2251.976351] ? io_connect+0x610/0x610 [ 2251.976889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2251.977622] ? lock_acquire+0x197/0x470 [ 2251.978191] ? find_held_lock+0x2c/0x110 [ 2251.978763] ? __fget_files+0x2cf/0x520 [ 2251.979316] ? lock_downgrade+0x6d0/0x6d0 [ 2251.979893] __io_queue_sqe+0x90/0x9d0 [ 2251.980458] ? io_issue_sqe+0x77d0/0x77d0 [ 2251.981051] ? __fget_files+0x2f8/0x520 [ 2251.981609] ? io_prep_rw+0x7f5/0x1050 [ 2251.982166] io_submit_sqes+0x44ab/0x8610 [ 2251.982770] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2251.983465] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2251.984141] ? find_held_lock+0x2c/0x110 [ 2251.984711] ? io_submit_sqes+0x8610/0x8610 [ 2251.985329] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2251.986001] ? wait_for_completion_io+0x270/0x270 [ 2251.986685] ? rcu_read_lock_any_held+0x75/0xa0 [ 2251.987342] ? vfs_write+0x354/0xb10 [ 2251.987865] ? fput_many+0x2f/0x1a0 [ 2251.988382] ? ksys_write+0x1a9/0x260 [ 2251.988919] ? __ia32_sys_read+0xb0/0xb0 [ 2251.989497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2251.990245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2251.990968] do_syscall_64+0x33/0x40 [ 2251.991491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2251.992228] RIP: 0033:0x7f8d46f94b19 [ 2251.992748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2251.995318] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2251.996378] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2251.997372] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2251.998380] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2251.999373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2252.000377] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:05:39 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000480), 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/md_mod', 0x48001, 0x100) [ 2252.023149] FAULT_INJECTION: forcing a failure. [ 2252.023149] name failslab, interval 1, probability 0, space 0, times 0 [ 2252.025603] CPU: 1 PID: 11671 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2252.027080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2252.028826] Call Trace: [ 2252.029388] dump_stack+0x107/0x167 [ 2252.030177] should_fail.cold+0x5/0xa [ 2252.030993] ? create_object.isra.0+0x3a/0xa30 [ 2252.031948] should_failslab+0x5/0x20 [ 2252.032747] kmem_cache_alloc+0x5b/0x310 [ 2252.033597] ? mark_held_locks+0x9e/0xe0 [ 2252.034465] create_object.isra.0+0x3a/0xa30 [ 2252.035387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2252.036456] kmem_cache_alloc_bulk+0x168/0x320 [ 2252.037416] io_submit_sqes+0x6fe7/0x8610 [ 2252.038322] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2252.039359] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2252.040370] ? find_held_lock+0x2c/0x110 [ 2252.041225] ? io_submit_sqes+0x8610/0x8610 [ 2252.042139] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2252.043156] ? wait_for_completion_io+0x270/0x270 [ 2252.044167] ? rcu_read_lock_any_held+0x75/0xa0 [ 2252.045135] ? vfs_write+0x354/0xb10 [ 2252.045914] ? fput_many+0x2f/0x1a0 [ 2252.046701] ? ksys_write+0x1a9/0x260 [ 2252.047510] ? __ia32_sys_read+0xb0/0xb0 [ 2252.048375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2252.049482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2252.050592] do_syscall_64+0x33/0x40 [ 2252.051375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2252.052450] RIP: 0033:0x7fe1da102b19 [ 2252.053240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2252.057117] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2252.058742] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2252.060262] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2252.061779] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2252.063310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2252.064823] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:05:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 03:05:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 03:05:39 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = accept4$unix(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80800) copy_file_range(r0, 0x0, r1, &(0x7f0000000100)=0x7, 0x4, 0x0) 03:05:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 03:05:39 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) 03:05:39 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x74, 0x0, 0x0, 0x0) 03:05:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 03:05:39 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 03:05:39 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 03:05:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x23) [ 2252.396435] FAULT_INJECTION: forcing a failure. [ 2252.396435] name failslab, interval 1, probability 0, space 0, times 0 [ 2252.397848] CPU: 0 PID: 11701 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2252.398699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2252.399709] Call Trace: [ 2252.400038] dump_stack+0x107/0x167 [ 2252.400486] should_fail.cold+0x5/0xa [ 2252.400957] ? create_object.isra.0+0x3a/0xa30 [ 2252.401514] should_failslab+0x5/0x20 [ 2252.401980] kmem_cache_alloc+0x5b/0x310 [ 2252.402486] ? mark_held_locks+0x9e/0xe0 [ 2252.402986] create_object.isra.0+0x3a/0xa30 [ 2252.403523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2252.404147] kmem_cache_alloc_bulk+0x168/0x320 [ 2252.404712] io_submit_sqes+0x6fe7/0x8610 [ 2252.405246] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2252.405854] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2252.406450] ? find_held_lock+0x2c/0x110 [ 2252.406949] ? io_submit_sqes+0x8610/0x8610 [ 2252.407482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2252.408070] ? wait_for_completion_io+0x270/0x270 [ 2252.408670] ? rcu_read_lock_any_held+0x75/0xa0 [ 2252.409237] ? vfs_write+0x354/0xb10 [ 2252.409692] ? fput_many+0x2f/0x1a0 [ 2252.410139] ? ksys_write+0x1a9/0x260 [ 2252.410612] ? __ia32_sys_read+0xb0/0xb0 [ 2252.411113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2252.411756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2252.412386] do_syscall_64+0x33/0x40 [ 2252.412842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2252.413462] RIP: 0033:0x7fe1da102b19 [ 2252.413915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2252.416157] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2252.417082] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2252.417945] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2252.418818] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2252.419678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2252.420538] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:05:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 03:05:54 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 03:05:54 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 03:05:54 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 03:05:54 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000040)=0x80, 0x80800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4020000}, 0x20040406) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000000)) 03:05:54 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a, 0x0, 0x0, 0x0) 03:05:54 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x100000, 0x0, 0x0, 0x0) 03:05:54 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) [ 2267.357077] FAULT_INJECTION: forcing a failure. [ 2267.357077] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.359780] CPU: 0 PID: 11719 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2267.361125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.362742] Call Trace: [ 2267.363260] dump_stack+0x107/0x167 [ 2267.363970] should_fail.cold+0x5/0xa [ 2267.364708] ? create_object.isra.0+0x3a/0xa30 [ 2267.365590] should_failslab+0x5/0x20 [ 2267.366336] kmem_cache_alloc+0x5b/0x310 [ 2267.367124] ? mark_held_locks+0x9e/0xe0 [ 2267.367911] create_object.isra.0+0x3a/0xa30 [ 2267.368758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2267.369750] kmem_cache_alloc_bulk+0x168/0x320 [ 2267.370644] io_submit_sqes+0x6fe7/0x8610 [ 2267.371474] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2267.372443] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2267.373389] ? find_held_lock+0x2c/0x110 [ 2267.374183] ? io_submit_sqes+0x8610/0x8610 [ 2267.375036] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2267.375968] ? wait_for_completion_io+0x270/0x270 [ 2267.376896] ? rcu_read_lock_any_held+0x75/0xa0 [ 2267.377787] ? vfs_write+0x354/0xb10 [ 2267.378516] ? fput_many+0x2f/0x1a0 [ 2267.379218] ? ksys_write+0x1a9/0x260 [ 2267.379950] ? __ia32_sys_read+0xb0/0xb0 [ 2267.380734] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.381737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2267.382737] do_syscall_64+0x33/0x40 [ 2267.383449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2267.384435] RIP: 0033:0x7fe1da102b19 [ 2267.385166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2267.388705] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2267.390166] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2267.391542] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2267.392910] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.394292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2267.395667] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2267.411035] FAULT_INJECTION: forcing a failure. [ 2267.411035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2267.413431] CPU: 0 PID: 11729 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2267.414762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2267.416337] Call Trace: [ 2267.416844] dump_stack+0x107/0x167 [ 2267.417538] should_fail.cold+0x5/0xa [ 2267.418263] _copy_to_iter+0x264/0x12d0 [ 2267.419028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2267.419936] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2267.420861] ? __virt_addr_valid+0x170/0x5d0 [ 2267.421690] ? __check_object_size+0x319/0x440 [ 2267.422575] seq_read_iter+0xdcb/0x12b0 [ 2267.423343] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2267.424262] kernfs_fop_read_iter+0x456/0x5f0 [ 2267.425109] ? rw_verify_area+0x11d/0x350 [ 2267.425895] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2267.426830] io_read+0x2dc/0x11e0 [ 2267.427489] ? __lock_acquire+0x1657/0x5b00 [ 2267.428306] ? kiocb_done+0xc90/0xc90 [ 2267.429021] ? mark_lock+0xf5/0x2df0 [ 2267.429725] ? lock_chain_count+0x20/0x20 [ 2267.430514] ? __lock_acquire+0x1657/0x5b00 [ 2267.431338] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2267.432323] ? lock_chain_count+0x20/0x20 [ 2267.433107] ? __lock_acquire+0xbb1/0x5b00 [ 2267.433906] io_issue_sqe+0x2e8a/0x77d0 [ 2267.434666] ? find_held_lock+0x2c/0x110 [ 2267.435430] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2267.436415] ? io_poll_remove_entries+0x30a/0x540 [ 2267.437319] ? io_connect+0x610/0x610 [ 2267.438034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.439018] ? lock_acquire+0x197/0x470 [ 2267.439755] ? find_held_lock+0x2c/0x110 [ 2267.440513] ? __fget_files+0x2cf/0x520 [ 2267.441252] ? lock_downgrade+0x6d0/0x6d0 [ 2267.442029] __io_queue_sqe+0x90/0x9d0 [ 2267.442763] ? io_issue_sqe+0x77d0/0x77d0 [ 2267.443535] ? __fget_files+0x2f8/0x520 [ 2267.444276] ? io_prep_rw+0x7f5/0x1050 [ 2267.445006] io_submit_sqes+0x44ab/0x8610 [ 2267.445800] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2267.446735] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2267.447632] ? find_held_lock+0x2c/0x110 [ 2267.448392] ? io_submit_sqes+0x8610/0x8610 [ 2267.449202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2267.450101] ? wait_for_completion_io+0x270/0x270 [ 2267.451013] ? rcu_read_lock_any_held+0x75/0xa0 [ 2267.451871] ? vfs_write+0x354/0xb10 [ 2267.452560] ? fput_many+0x2f/0x1a0 [ 2267.453239] ? ksys_write+0x1a9/0x260 [ 2267.453945] ? __ia32_sys_read+0xb0/0xb0 [ 2267.454713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2267.455682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2267.456638] do_syscall_64+0x33/0x40 [ 2267.457329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2267.458277] RIP: 0033:0x7f8d46f94b19 [ 2267.458967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2267.462339] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2267.463735] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2267.465036] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2267.466337] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2267.467632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2267.468932] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:05:54 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) copy_file_range(r0, &(0x7f0000000000), r1, 0x0, 0x0, 0x0) 03:05:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 03:05:54 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 03:05:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2400, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) r3 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x88c00) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000300)={{r3}, "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"}) syz_io_uring_setup(0x4e06, &(0x7f0000000100)={0x0, 0x3569, 0x10, 0x3, 0x2db, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x1, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, {0x0, r1}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r1}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r1}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r1}}, 0x101) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001580)={'syz_tun\x00', &(0x7f0000001540)=@ethtool_ringparam={0x11, 0x9, 0x9, 0x7, 0x3, 0x7, 0x5737, 0x3, 0x5}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x2, 0x73d, &(0x7f0000000000), 0x0, 0xd, 0x0, {0x0, r1}}, 0x3ff) 03:05:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 03:06:11 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 03:06:11 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 03:06:11 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 03:06:11 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c, 0x0, 0x0, 0x0) 03:06:11 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2200, 0x1) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x101000, 0x8) r3 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f00000012c0)=[{&(0x7f0000000140)="7b9623762c55b88715ad39ed6f83ce496086", 0x12, 0x6}, {&(0x7f0000000180)="5295b23e8c3cc8078371ecaf06738305c54a109d811eecd7330861be2f69d6c1b0c2873bd7", 0x25, 0x3ff}, {&(0x7f00000001c0)="c05109d930da881774bfbb106e5baa772a0b2ee5ad7e7f3c445eb5f71275fa5368882c0d82766470e272c3bc3457e54268fa88a5b2d814cb214ba53372e2c1dda22fb2ca374052bfdcf5c5b667ab2ee4ff744bfdbda8a32820e94f413c18b04ff0cd2307037e25bc338be9042963281e63a4ed0e8cbde30d40526948e0571280e8a3d7d46a147f99a68ac64e2718e7599a5687770e7a6a8cd6a90603d8c93a27604bfd07f39af6d405c644599f16237ba4573fb920e82602125dca6ffe16a2639e517620ca54dd", 0xc7, 0x6}, {&(0x7f00000002c0)="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", 0x1000, 0x5}], 0x2000, &(0x7f00000018c0)={[{@nodots}, {@dots}, {@fat=@tz_utc}], [{@obj_role={'obj_role', 0x3d, '@*'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x35, 0x33, 0x36, 0x31, 0x36, 0x66, 0x61], 0x2d, [0x65, 0x64, 0x39, 0x38], 0x2d, [0x44, 0x32, 0x39], 0x2d, [0x62, 0x0, 0x34, 0x62], 0x2d, [0x38, 0x61, 0x65, 0x31, 0x38, 0x31, 0x63, 0x62]}}}, {@euid_lt}, {@uid_lt={'uid<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', 0xee00}}]}) mkdirat(r3, &(0x7f0000001400)='./file0/file0\x00', 0x20) syz_io_uring_setup(0x3b4c, &(0x7f0000001440)={0x0, 0xd2dd, 0x0, 0x3, 0x396, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000001500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000001580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_submit(r4, 0x0, &(0x7f0000001540)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) 03:06:11 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 03:06:11 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 03:06:11 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) [ 2284.157034] FAULT_INJECTION: forcing a failure. [ 2284.157034] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.159881] CPU: 0 PID: 11768 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2284.161425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.163321] Call Trace: [ 2284.163918] dump_stack+0x107/0x167 [ 2284.164732] should_fail.cold+0x5/0xa [ 2284.165591] ? io_setup_async_rw+0x180/0x580 [ 2284.166586] should_failslab+0x5/0x20 [ 2284.167435] __kmalloc+0x72/0x390 [ 2284.168213] io_setup_async_rw+0x180/0x580 [ 2284.169163] ? iov_iter_restore+0x195/0x3a0 [ 2284.170126] io_read+0x775/0x11e0 [ 2284.170919] ? __lock_acquire+0x1657/0x5b00 [ 2284.171895] ? kiocb_done+0xc90/0xc90 [ 2284.172741] ? mark_lock+0xf5/0x2df0 [ 2284.173590] ? lock_chain_count+0x20/0x20 [ 2284.174521] ? __lock_acquire+0x1657/0x5b00 [ 2284.175515] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2284.176700] ? lock_chain_count+0x20/0x20 [ 2284.177642] ? __lock_acquire+0xbb1/0x5b00 [ 2284.178602] io_issue_sqe+0x2e8a/0x77d0 [ 2284.179498] ? find_held_lock+0x2c/0x110 [ 2284.180419] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2284.181598] ? io_poll_remove_entries+0x30a/0x540 [ 2284.182687] ? io_connect+0x610/0x610 [ 2284.183544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.184726] ? lock_acquire+0x197/0x470 [ 2284.185615] ? find_held_lock+0x2c/0x110 [ 2284.186550] ? __fget_files+0x2cf/0x520 [ 2284.187436] ? lock_downgrade+0x6d0/0x6d0 [ 2284.188369] __io_queue_sqe+0x90/0x9d0 [ 2284.189252] ? io_issue_sqe+0x77d0/0x77d0 [ 2284.190181] ? __fget_files+0x2f8/0x520 [ 2284.191077] ? io_prep_rw+0x7f5/0x1050 [ 2284.191955] io_submit_sqes+0x44ab/0x8610 [ 2284.192924] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.194031] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.195127] ? find_held_lock+0x2c/0x110 [ 2284.196035] ? io_submit_sqes+0x8610/0x8610 [ 2284.197002] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.198075] ? wait_for_completion_io+0x270/0x270 [ 2284.199162] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.200195] ? vfs_write+0x354/0xb10 [ 2284.201031] ? fput_many+0x2f/0x1a0 03:06:11 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) [ 2284.201844] ? ksys_write+0x1a9/0x260 [ 2284.202892] ? __ia32_sys_read+0xb0/0xb0 [ 2284.203828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.205028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.206210] do_syscall_64+0x33/0x40 [ 2284.207071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.208246] RIP: 0033:0x7f8d46f94b19 [ 2284.209101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.213340] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2284.215091] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2284.216725] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2284.218361] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.220006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.221644] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 [ 2284.241917] loop3: detected capacity change from 0 to 4096 [ 2284.245669] FAULT_INJECTION: forcing a failure. [ 2284.245669] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.250596] CPU: 0 PID: 11773 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2284.252186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.254068] Call Trace: [ 2284.254678] dump_stack+0x107/0x167 [ 2284.255502] should_fail.cold+0x5/0xa [ 2284.256376] ? create_object.isra.0+0x3a/0xa30 [ 2284.257415] should_failslab+0x5/0x20 [ 2284.258273] kmem_cache_alloc+0x5b/0x310 [ 2284.259204] ? mark_held_locks+0x9e/0xe0 [ 2284.260127] create_object.isra.0+0x3a/0xa30 [ 2284.261125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.262278] kmem_cache_alloc_bulk+0x168/0x320 [ 2284.263330] io_submit_sqes+0x6fe7/0x8610 [ 2284.264291] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.265422] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.266504] ? find_held_lock+0x2c/0x110 [ 2284.267430] ? io_submit_sqes+0x8610/0x8610 [ 2284.268417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.269528] ? wait_for_completion_io+0x270/0x270 [ 2284.270639] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.271685] ? vfs_write+0x354/0xb10 [ 2284.272523] ? fput_many+0x2f/0x1a0 [ 2284.273343] ? ksys_write+0x1a9/0x260 [ 2284.274205] ? __ia32_sys_read+0xb0/0xb0 [ 2284.275148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.276344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.277514] do_syscall_64+0x33/0x40 [ 2284.278366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.279541] RIP: 0033:0x7fe1da102b19 [ 2284.280385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.284561] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2284.286297] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2284.287941] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2284.289562] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.291193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.292814] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:06:11 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 03:06:11 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/pcmcia_socket', 0x0, 0x80) 03:06:11 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 03:06:11 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) 03:06:11 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/backlight', 0x101000, 0x0) 03:06:11 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 03:06:12 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 03:06:12 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 03:06:12 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 03:06:12 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 03:06:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 03:06:12 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) io_setup(0x5c2, &(0x7f0000000000)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r2, 0xffffffffffffffff, 0x0, 0x500000001) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) sendfile(r5, r0, &(0x7f0000000180)=0x9, 0x7fff) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f00000001c0)="c3c4b9f38dfde453e92c8c84bda86af8000046d523a7186b2f821cc404beaec3efb96c2431096a62be23de2da09860ab15aea80056e1c54eaa2749d71c7cbe8ece5db9af05692fc0e14a570b16a32faa624175", 0x53, 0x8, 0x0, 0x7, r0}, &(0x7f0000000140)) 03:06:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) [ 2284.879602] FAULT_INJECTION: forcing a failure. [ 2284.879602] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.882049] CPU: 1 PID: 11824 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2284.883488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.885215] Call Trace: [ 2284.885768] dump_stack+0x107/0x167 [ 2284.886522] should_fail.cold+0x5/0xa [ 2284.887368] ? create_object.isra.0+0x3a/0xa30 [ 2284.888321] should_failslab+0x5/0x20 [ 2284.889107] kmem_cache_alloc+0x5b/0x310 [ 2284.889976] ? mark_held_locks+0x9e/0xe0 [ 2284.890869] create_object.isra.0+0x3a/0xa30 [ 2284.891791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2284.892838] kmem_cache_alloc_bulk+0x168/0x320 [ 2284.893793] io_submit_sqes+0x6fe7/0x8610 [ 2284.894723] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.895779] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.896784] ? find_held_lock+0x2c/0x110 [ 2284.897623] ? io_submit_sqes+0x8610/0x8610 [ 2284.898526] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.899574] ? wait_for_completion_io+0x270/0x270 [ 2284.900597] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.901578] ? vfs_write+0x354/0xb10 [ 2284.902364] ? fput_many+0x2f/0x1a0 [ 2284.903161] ? ksys_write+0x1a9/0x260 [ 2284.903963] ? __ia32_sys_read+0xb0/0xb0 [ 2284.904820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.905923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.907045] do_syscall_64+0x33/0x40 [ 2284.907831] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.908909] RIP: 0033:0x7fe1da102b19 [ 2284.909692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.913576] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2284.915208] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2284.916704] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2284.918211] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.919743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.921248] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2284.925739] FAULT_INJECTION: forcing a failure. [ 2284.925739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2284.928580] CPU: 0 PID: 11823 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2284.930052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.931820] Call Trace: [ 2284.932387] dump_stack+0x107/0x167 [ 2284.933165] should_fail.cold+0x5/0xa [ 2284.933976] _copy_from_user+0x2e/0x1b0 [ 2284.934840] iovec_from_user+0x141/0x400 [ 2284.935711] __import_iovec+0x67/0x590 [ 2284.936540] ? kfree+0xd7/0x340 [ 2284.937258] io_import_iovec+0x581/0x1120 [ 2284.938127] ? io_link_timeout_fn+0x20/0x380 [ 2284.939069] ? io_complete_rw+0x230/0x230 [ 2284.939939] ? io_clean_op+0x30c/0x870 [ 2284.940768] ? kiocb_done+0x16b/0xc90 [ 2284.941574] io_read+0xe14/0x11e0 [ 2284.942311] ? __lock_acquire+0x1657/0x5b00 [ 2284.943227] ? kiocb_done+0xc90/0xc90 [ 2284.944025] ? mark_lock+0xf5/0x2df0 [ 2284.944820] ? lock_chain_count+0x20/0x20 [ 2284.945691] ? __lock_acquire+0x1657/0x5b00 [ 2284.946613] ? mark_lock+0xf5/0x2df0 [ 2284.947409] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2284.948515] ? lock_chain_count+0x20/0x20 [ 2284.949400] ? __lock_acquire+0xbb1/0x5b00 [ 2284.950293] io_issue_sqe+0x2e8a/0x77d0 [ 2284.951141] ? find_held_lock+0x2c/0x110 [ 2284.951996] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2284.953099] ? io_poll_remove_entries+0x30a/0x540 [ 2284.954105] ? io_connect+0x610/0x610 [ 2284.954907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.956010] ? lock_acquire+0x197/0x470 [ 2284.956836] ? find_held_lock+0x2c/0x110 [ 2284.957704] ? __fget_files+0x2cf/0x520 [ 2284.958543] ? lock_downgrade+0x6d0/0x6d0 [ 2284.959423] __io_queue_sqe+0x90/0x9d0 [ 2284.960256] ? io_issue_sqe+0x77d0/0x77d0 [ 2284.961123] ? __fget_files+0x2f8/0x520 [ 2284.961954] ? io_prep_rw+0x7f5/0x1050 [ 2284.962780] io_submit_sqes+0x44ab/0x8610 [ 2284.963681] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.964728] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2284.965744] ? find_held_lock+0x2c/0x110 [ 2284.966607] ? io_submit_sqes+0x8610/0x8610 [ 2284.967520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.968522] ? wait_for_completion_io+0x270/0x270 [ 2284.969535] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.970513] ? vfs_write+0x354/0xb10 [ 2284.971297] ? fput_many+0x2f/0x1a0 [ 2284.972063] ? ksys_write+0x1a9/0x260 [ 2284.972864] ? __ia32_sys_read+0xb0/0xb0 [ 2284.973719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2284.974829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2284.975911] do_syscall_64+0x33/0x40 [ 2284.976699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2284.977768] RIP: 0033:0x7f8d46f94b19 [ 2284.978557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.982428] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2284.984032] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2284.985493] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2284.986942] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.988399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.989843] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:06:27 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x300, 0x0, 0x0, 0x0) 03:06:27 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 03:06:27 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 03:06:27 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 03:06:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 03:06:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 03:06:27 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 03:06:27 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 2299.876452] FAULT_INJECTION: forcing a failure. [ 2299.876452] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.878407] CPU: 1 PID: 11846 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2299.879550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.880934] Call Trace: [ 2299.881372] dump_stack+0x107/0x167 [ 2299.881976] should_fail.cold+0x5/0xa [ 2299.882614] ? create_object.isra.0+0x3a/0xa30 [ 2299.883371] should_failslab+0x5/0x20 [ 2299.884003] kmem_cache_alloc+0x5b/0x310 [ 2299.884682] ? mark_held_locks+0x9e/0xe0 [ 2299.885357] create_object.isra.0+0x3a/0xa30 [ 2299.886082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.886952] kmem_cache_alloc_bulk+0x168/0x320 [ 2299.887711] io_submit_sqes+0x6fe7/0x8610 [ 2299.888425] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2299.889245] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2299.890035] ? find_held_lock+0x2c/0x110 [ 2299.890702] ? io_submit_sqes+0x8610/0x8610 [ 2299.890765] FAULT_INJECTION: forcing a failure. [ 2299.890765] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.891435] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.891452] ? wait_for_completion_io+0x270/0x270 [ 2299.891484] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.896140] ? vfs_write+0x354/0xb10 [ 2299.896755] ? fput_many+0x2f/0x1a0 [ 2299.897361] ? ksys_write+0x1a9/0x260 [ 2299.897984] ? __ia32_sys_read+0xb0/0xb0 [ 2299.898655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.899526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.900380] do_syscall_64+0x33/0x40 [ 2299.900997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.901841] RIP: 0033:0x7fe1da102b19 [ 2299.902473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.905497] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2299.906777] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2299.907960] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2299.909138] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.910331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.911520] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2299.912720] CPU: 0 PID: 11848 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2299.914199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.915943] Call Trace: [ 2299.916509] dump_stack+0x107/0x167 [ 2299.917283] should_fail.cold+0x5/0xa [ 2299.918089] ? __io_queue_sqe+0x666/0x9d0 [ 2299.918982] should_failslab+0x5/0x20 [ 2299.919781] kmem_cache_alloc_trace+0x55/0x320 [ 2299.920746] ? lock_downgrade+0x6d0/0x6d0 [ 2299.921622] __io_queue_sqe+0x666/0x9d0 [ 2299.922464] ? io_issue_sqe+0x77d0/0x77d0 [ 2299.923348] ? __fget_files+0x2f8/0x520 [ 2299.924197] ? io_prep_rw+0x7f5/0x1050 [ 2299.925019] io_submit_sqes+0x44ab/0x8610 [ 2299.925925] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2299.926976] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2299.927990] ? find_held_lock+0x2c/0x110 [ 2299.928845] ? io_submit_sqes+0x8610/0x8610 [ 2299.929764] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.930785] ? wait_for_completion_io+0x270/0x270 [ 2299.931796] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.932768] ? vfs_write+0x354/0xb10 [ 2299.933550] ? fput_many+0x2f/0x1a0 [ 2299.934316] ? ksys_write+0x1a9/0x260 [ 2299.935136] ? __ia32_sys_read+0xb0/0xb0 [ 2299.935996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.937098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.938185] do_syscall_64+0x33/0x40 [ 2299.938987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.940061] RIP: 0033:0x7f8d46f94b19 [ 2299.940838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.944723] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2299.946321] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2299.947818] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2299.949307] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.950810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.952301] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:06:27 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x11, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000009c0)=ANY=[@ANYBLOB="5f385148ba7a7c71642f7b6c5c006dfc218d4e64fea3d458d14b3e84a8fe97624df846d02e3c2be33f7bcc27bc351e27bdc1b35051f4cb9068869941cfadecef1f86c3766a7ae4434c719a6b4bfd8823eaaf289ce2cb325bfd81b4854d8fdd7865", @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYBLOB="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"]) r1 = syz_io_uring_setup(0x3687, &(0x7f0000000400)={0x0, 0x89cc, 0x0, 0x8000002, 0x2e9}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) pread64(r0, &(0x7f0000000380)=""/116, 0x74, 0xd349578) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x879, &(0x7f0000000140)={0x0, 0x2cef, 0x8, 0x1, 0x3e2, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000240)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}}, 0x0) io_uring_enter(r3, 0x76d2, 0x0, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf256700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000000003c0000004500c5005afa4f6a9415664cc128b88810c4b9de2ddccf3739ed8267b0381fbe41c6313faf9b9fe91b2afb282d2e5d70eaa785743e77157b4d7f3a123e38dfb25fd07f4db1000000cb00c51ebdba2c952ecde8eea9adf4a3b3bfb28fdb1bfd9600ad27ea14edd3e7f370c1d6e099baa741cd185a6febd9d48d805e3c2433ed1f97d19fa1749d969bc736e22d3a1f7f5a356fe88e27b5f466809a35619e62c9f7ec193992a2b0a3c61142b0cdab566ac9952582bdef37023633f72e71024f33e808ea0516625532aacad7785adcd1a121948cf0729837a08da6222695ee6213e30872a546d2059376a44558df8621cdf5e127413c48ce3d3c6acb8e75af81aa264ce663e2c6821ba1383c2d06ddcb3ea961cab3000800c4000600000031f017aa89fa14221f179c89f279f8b6fc54377a3ae04b0afd4a15a6e383fb6be346670380feeb5f0dab027c4673450f14ae84bccd8932df4a17b7d3a9c025d3d8abfdc9c6bc430ec48fe2a20c8f26bf93b74a7d216fe20a71e63737dfd6cb376cb692e1841fc35f68010e27d9d75d911f3ca3ebe24606861168dfa81350c432ddc1e0f384467f03bc"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x44000) poll(&(0x7f0000000780)=[{r1, 0x44}, {0xffffffffffffffff, 0x104}, {0xffffffffffffffff, 0x100}], 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) 03:06:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 03:06:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 03:06:27 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 03:06:27 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3000000, 0x0, 0x0, 0x0) 03:06:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 03:06:27 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_io_uring_setup(0x33fb, &(0x7f0000000000)={0x0, 0xf9fb, 0x441904a08a9b65d8, 0x3, 0x347, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) sendfile(r1, r0, &(0x7f0000000140)=0x7fff, 0xff) 03:06:40 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 03:06:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) pwrite64(r0, &(0x7f0000000000)="88accfbb819a2c5669c9165b14b7b73761c3306fb03a7730314d71eb941b2f72255bbbad5be61533bd43f4e9ea881d01e91277e21f8e261374f4bfc02b4aae8fb3562c56785ad9386fdd7706bd7df322d9023ef71d65ef04946867d6930a59c49fbea1405221", 0x66, 0x9) 03:06:40 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 03:06:40 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) 03:06:40 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 03:06:40 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 03:06:40 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4000000, 0x0, 0x0, 0x0) 03:06:40 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) [ 2313.390825] FAULT_INJECTION: forcing a failure. [ 2313.390825] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.392324] CPU: 1 PID: 11896 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2313.393187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.394214] Call Trace: [ 2313.394549] dump_stack+0x107/0x167 [ 2313.395011] should_fail.cold+0x5/0xa [ 2313.395482] ? create_object.isra.0+0x3a/0xa30 [ 2313.396052] should_failslab+0x5/0x20 [ 2313.396518] kmem_cache_alloc+0x5b/0x310 [ 2313.397028] ? mark_held_locks+0x9e/0xe0 [ 2313.397534] create_object.isra.0+0x3a/0xa30 [ 2313.398072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.398697] kmem_cache_alloc_bulk+0x168/0x320 [ 2313.399286] io_submit_sqes+0x6fe7/0x8610 [ 2313.399818] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2313.400431] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2313.401020] ? find_held_lock+0x2c/0x110 [ 2313.401531] ? io_submit_sqes+0x8610/0x8610 [ 2313.402070] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2313.402663] ? wait_for_completion_io+0x270/0x270 [ 2313.403266] ? rcu_read_lock_any_held+0x75/0xa0 [ 2313.403836] ? vfs_write+0x354/0xb10 [ 2313.404294] ? fput_many+0x2f/0x1a0 [ 2313.404745] ? ksys_write+0x1a9/0x260 [ 2313.405211] ? __ia32_sys_read+0xb0/0xb0 [ 2313.405712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.406365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.407025] do_syscall_64+0x33/0x40 [ 2313.407534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.408176] RIP: 0033:0x7fe1da102b19 [ 2313.408641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.411001] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2313.411949] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2313.412828] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2313.413716] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.414595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.415474] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2313.421856] FAULT_INJECTION: forcing a failure. [ 2313.421856] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.424428] CPU: 0 PID: 11897 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2313.425895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2313.427681] Call Trace: [ 2313.428247] dump_stack+0x107/0x167 [ 2313.429030] should_fail.cold+0x5/0xa [ 2313.429846] ? io_poll_remove_entries+0x30a/0x540 [ 2313.430883] ? create_object.isra.0+0x3a/0xa30 [ 2313.431861] should_failslab+0x5/0x20 [ 2313.432661] kmem_cache_alloc+0x5b/0x310 [ 2313.433520] create_object.isra.0+0x3a/0xa30 [ 2313.434443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2313.435525] kmem_cache_alloc_trace+0x151/0x320 [ 2313.436503] ? lock_downgrade+0x6d0/0x6d0 [ 2313.437379] __io_queue_sqe+0x666/0x9d0 [ 2313.438221] ? io_issue_sqe+0x77d0/0x77d0 [ 2313.439101] ? __fget_files+0x2f8/0x520 [ 2313.439944] ? io_prep_rw+0x7f5/0x1050 [ 2313.440768] io_submit_sqes+0x44ab/0x8610 [ 2313.441669] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2313.442714] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2313.443744] ? find_held_lock+0x2c/0x110 [ 2313.444610] ? io_submit_sqes+0x8610/0x8610 [ 2313.445522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2313.446535] ? wait_for_completion_io+0x270/0x270 [ 2313.447556] ? rcu_read_lock_any_held+0x75/0xa0 [ 2313.448533] ? vfs_write+0x354/0xb10 [ 2313.449324] ? fput_many+0x2f/0x1a0 [ 2313.450091] ? ksys_write+0x1a9/0x260 [ 2313.450903] ? __ia32_sys_read+0xb0/0xb0 [ 2313.451763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2313.452857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2313.453938] do_syscall_64+0x33/0x40 [ 2313.454717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2313.455804] RIP: 0033:0x7f8d46f94b19 [ 2313.456584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.460429] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2313.462018] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2313.463515] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2313.465002] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.466490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2313.467984] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:06:40 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) 03:06:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 2327.794465] FAULT_INJECTION: forcing a failure. [ 2327.794465] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.796363] CPU: 1 PID: 11930 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2327.797366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2327.798564] Call Trace: [ 2327.798953] dump_stack+0x107/0x167 [ 2327.799491] should_fail.cold+0x5/0xa [ 2327.800045] ? io_poll_remove_entries+0x30a/0x540 [ 2327.800746] ? create_object.isra.0+0x3a/0xa30 [ 2327.801406] should_failslab+0x5/0x20 [ 2327.801957] kmem_cache_alloc+0x5b/0x310 [ 2327.802549] create_object.isra.0+0x3a/0xa30 [ 2327.803191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2327.803929] kmem_cache_alloc_trace+0x151/0x320 [ 2327.804602] ? lock_downgrade+0x6d0/0x6d0 [ 2327.805208] __io_queue_sqe+0x666/0x9d0 [ 2327.806063] ? io_issue_sqe+0x77d0/0x77d0 03:06:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 03:06:55 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 03:06:55 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 03:06:55 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 03:06:55 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) 03:06:55 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 03:06:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="ca1e76e85ffc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) r3 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x170) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r4, r3, 0x0, 0x500000001) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x1, 0x9, 0x12, 0x0, "819df3ecad5d8574db8aade7e23e819bc440e50f132d5cebfc1fcfa80265ff98b2e8863931c43b1d32ef9c7e40a17f54f3d649eec930b4483c8f00c7b33d7c43", "eb4bbf773cdb852f71464475ea19ad51da1643b4550f425a54fa42d9f8a42442", [0x1, 0x8]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x10001, 0x0, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x5a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x16}]}, @noop]}}}}}) stat(&(0x7f0000000200)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00180af2", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf2502000000140009000000000000000000000000000000000104000500050003008900000008000600ac1e0001"], 0x3c}}, 0x4000000) setresuid(0xffffffffffffffff, r8, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b00100001a0010002bbd70000500000020010000000000000000000000000002ac1414aa0000000000000000000000004e2200004e23ac980000908021000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="fe8000000000000000000000000000bb000004d2330000007f000001000000000000000000000000970c0000000000000700000000000000000100000000000096000000000000004800000000000000ff07000000000000000000000000000004000000000000000600000000000000020000000000000016000000000000000900000000000000b20d0000060000007c0a000025bd700000000000020000090000000000000000ac000700ff0200000000000000000000000000010a0101000000000000000000000000004e2400004e2000010a0020a016000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="307200004f0400000000000007e8230000000000ffffff7f0000000006000000000000000100000001000000030000000000000008000000000000000700000000000000ff000000000000000200000000000000000000000000000007000000bf6b6e00020000000000000000000e00ac1414bb00"/128], 0x1b0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) [ 2327.806817] ? __fget_files+0x2f8/0x520 [ 2327.807619] ? io_prep_rw+0x7f5/0x1050 [ 2327.808281] io_submit_sqes+0x44ab/0x8610 [ 2327.808905] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2327.809631] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2327.810340] ? io_submit_sqes+0x8610/0x8610 [ 2327.810972] ? recalibrate_cpu_khz+0x10/0x10 [ 2327.811623] ? ktime_get+0x158/0x1f0 [ 2327.812177] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2327.812807] ? clockevents_program_event+0x131/0x360 [ 2327.813550] ? tick_program_event+0xa8/0x140 [ 2327.814190] ? hrtimer_interrupt+0x771/0x9b0 [ 2327.814841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2327.815616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2327.816370] do_syscall_64+0x33/0x40 [ 2327.816914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2327.817660] RIP: 0033:0x7f8d46f94b19 [ 2327.818202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2327.820903] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2327.822010] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2327.823060] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2327.824062] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.825155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2327.826181] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 [ 2327.857834] FAULT_INJECTION: forcing a failure. [ 2327.857834] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.860536] CPU: 0 PID: 11937 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2327.861992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2327.863734] Call Trace: [ 2327.864297] dump_stack+0x107/0x167 [ 2327.865057] should_fail.cold+0x5/0xa [ 2327.865856] ? create_object.isra.0+0x3a/0xa30 [ 2327.866805] should_failslab+0x5/0x20 [ 2327.867606] kmem_cache_alloc+0x5b/0x310 [ 2327.868453] ? mark_held_locks+0x9e/0xe0 [ 2327.869302] create_object.isra.0+0x3a/0xa30 [ 2327.870215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2327.871294] kmem_cache_alloc_bulk+0x168/0x320 [ 2327.872257] io_submit_sqes+0x6fe7/0x8610 [ 2327.873186] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2327.874244] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2327.875276] ? find_held_lock+0x2c/0x110 [ 2327.876147] ? io_submit_sqes+0x8610/0x8610 [ 2327.877058] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2327.878085] ? wait_for_completion_io+0x270/0x270 [ 2327.879121] ? rcu_read_lock_any_held+0x75/0xa0 [ 2327.880091] ? vfs_write+0x354/0xb10 [ 2327.880871] ? fput_many+0x2f/0x1a0 [ 2327.881643] ? ksys_write+0x1a9/0x260 [ 2327.882453] ? __ia32_sys_read+0xb0/0xb0 [ 2327.883330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2327.884447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2327.885547] do_syscall_64+0x33/0x40 [ 2327.886352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2327.887454] RIP: 0033:0x7fe1da102b19 [ 2327.888244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2327.892740] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2327.894737] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2327.896647] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2327.898605] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.900546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2327.902233] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:06:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 03:06:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) 03:06:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/machinecheck', 0x121902, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x7, 0x3}) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1008414, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x2e7d}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_any}, {@loose}], [{@measure}]}}) 03:06:55 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x48000000, 0x0, 0x0, 0x0) 03:06:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) [ 2328.040746] 9pnet: Insufficient options for proto=fd 03:06:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 03:06:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x1010, r0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x4010, r2, 0x8000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000480), 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0xcb, 0x121000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r5, 0xfff, {0x0, r2}, 0xdb70, 0x2, 0x0, {0x0, r6, r7}}, 0x3) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x6, 0x9, 0x0, 0x0, 0x4, 0x0, {0x0, r3}}, 0xda7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x7fffffff, 0x2, 0x0, {0x0, 0x0, r2}}, 0x7) 03:06:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 03:06:55 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 03:06:55 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 2328.277617] FAULT_INJECTION: forcing a failure. [ 2328.277617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2328.279542] CPU: 1 PID: 11973 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2328.280365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.281352] Call Trace: [ 2328.281669] dump_stack+0x107/0x167 [ 2328.282100] should_fail.cold+0x5/0xa [ 2328.282555] _copy_to_iter+0x264/0x12d0 [ 2328.283035] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2328.283623] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2328.284216] ? __virt_addr_valid+0x170/0x5d0 [ 2328.284738] ? __check_object_size+0x319/0x440 [ 2328.285288] seq_read_iter+0xdcb/0x12b0 [ 2328.285785] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2328.286368] kernfs_fop_read_iter+0x456/0x5f0 [ 2328.286914] ? rw_verify_area+0x11d/0x350 [ 2328.287417] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2328.288005] io_read+0x2dc/0x11e0 [ 2328.288424] ? __lock_acquire+0x1657/0x5b00 [ 2328.288936] ? kiocb_done+0xc90/0xc90 [ 2328.289382] ? mark_lock+0xf5/0x2df0 [ 2328.289841] ? lock_chain_count+0x20/0x20 [ 2328.290330] ? __lock_acquire+0x1657/0x5b00 [ 2328.290847] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2328.291490] ? lock_chain_count+0x20/0x20 [ 2328.291984] ? __lock_acquire+0xbb1/0x5b00 [ 2328.292483] io_issue_sqe+0x2e8a/0x77d0 [ 2328.292952] ? find_held_lock+0x2c/0x110 [ 2328.293429] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2328.294051] ? io_poll_remove_entries+0x30a/0x540 [ 2328.294625] ? io_connect+0x610/0x610 [ 2328.295080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2328.295701] ? lock_acquire+0x197/0x470 [ 2328.296170] ? find_held_lock+0x2c/0x110 [ 2328.296658] ? __fget_files+0x2cf/0x520 [ 2328.297126] ? lock_downgrade+0x6d0/0x6d0 [ 2328.297623] __io_queue_sqe+0x90/0x9d0 [ 2328.298086] ? io_issue_sqe+0x77d0/0x77d0 [ 2328.298583] ? __fget_files+0x2f8/0x520 [ 2328.299065] ? io_prep_rw+0x7f5/0x1050 [ 2328.299537] io_submit_sqes+0x44ab/0x8610 [ 2328.300044] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2328.300625] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2328.301187] ? find_held_lock+0x2c/0x110 [ 2328.301665] ? io_submit_sqes+0x8610/0x8610 [ 2328.302175] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2328.302746] ? wait_for_completion_io+0x270/0x270 [ 2328.303334] ? rcu_read_lock_any_held+0x75/0xa0 [ 2328.303877] ? vfs_write+0x354/0xb10 [ 2328.304318] ? fput_many+0x2f/0x1a0 [ 2328.304746] ? ksys_write+0x1a9/0x260 [ 2328.305189] ? __ia32_sys_read+0xb0/0xb0 [ 2328.305681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2328.306305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2328.306917] do_syscall_64+0x33/0x40 [ 2328.307361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2328.307957] RIP: 0033:0x7f8d46f94b19 [ 2328.308389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.310518] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2328.311416] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2328.312252] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2328.313078] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2328.313901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.314725] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:07:10 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 03:07:10 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 03:07:10 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7000000, 0x0, 0x0, 0x0) 03:07:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x700, 0x0, 0x0, 0x0) 03:07:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 03:07:10 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c000000, 0x0, 0x0, 0x0) 03:07:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 03:07:10 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) [ 2342.901762] FAULT_INJECTION: forcing a failure. [ 2342.901762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2342.903296] CPU: 1 PID: 11988 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2342.904154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.905188] Call Trace: [ 2342.905521] dump_stack+0x107/0x167 [ 2342.905974] should_fail.cold+0x5/0xa [ 2342.906459] _copy_to_iter+0x264/0x12d0 [ 2342.906961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2342.907570] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2342.908180] ? __virt_addr_valid+0x170/0x5d0 [ 2342.908728] ? __check_object_size+0x319/0x440 [ 2342.909298] seq_read_iter+0xdcb/0x12b0 [ 2342.909816] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2342.910435] kernfs_fop_read_iter+0x456/0x5f0 [ 2342.910992] ? rw_verify_area+0x11d/0x350 [ 2342.911520] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2342.912126] io_read+0x2dc/0x11e0 [ 2342.912569] ? kiocb_done+0xc90/0xc90 [ 2342.913042] ? mark_lock+0xf5/0x2df0 [ 2342.913514] ? lock_chain_count+0x20/0x20 [ 2342.914034] ? stack_trace_consume_entry+0x160/0x160 [ 2342.914667] ? lock_acquire+0x197/0x470 [ 2342.915166] ? __lock_acquire+0xbb1/0x5b00 [ 2342.915699] io_issue_sqe+0x2e8a/0x77d0 [ 2342.916203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2342.916852] ? lock_chain_count+0x20/0x20 [ 2342.917370] ? __is_insn_slot_addr+0x14c/0x290 [ 2342.917939] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2342.918586] ? io_connect+0x610/0x610 [ 2342.919059] ? lock_acquire+0x197/0x470 [ 2342.919552] ? find_held_lock+0x2c/0x110 [ 2342.920055] ? __fget_files+0x2cf/0x520 [ 2342.920546] ? lock_downgrade+0x6d0/0x6d0 [ 2342.921059] __io_queue_sqe+0x90/0x9d0 [ 2342.921542] ? io_issue_sqe+0x77d0/0x77d0 [ 2342.922054] ? __fget_files+0x2f8/0x520 [ 2342.922552] ? io_prep_rw+0x7f5/0x1050 [ 2342.923035] io_submit_sqes+0x44ab/0x8610 [ 2342.923574] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2342.924194] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2342.924792] ? find_held_lock+0x2c/0x110 [ 2342.925295] ? io_submit_sqes+0x8610/0x8610 [ 2342.925828] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2342.926431] ? wait_for_completion_io+0x270/0x270 [ 2342.927026] ? rcu_read_lock_any_held+0x75/0xa0 [ 2342.927601] ? vfs_write+0x354/0xb10 [ 2342.928058] ? fput_many+0x2f/0x1a0 [ 2342.928513] ? ksys_write+0x1a9/0x260 [ 2342.928980] ? __ia32_sys_read+0xb0/0xb0 [ 2342.929491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2342.930135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.930773] do_syscall_64+0x33/0x40 [ 2342.931241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2342.931876] RIP: 0033:0x7fe1da102b19 [ 2342.932344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.934606] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2342.935561] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2342.936442] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2342.937329] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.938203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.939077] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2342.948464] FAULT_INJECTION: forcing a failure. [ 2342.948464] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.951133] CPU: 0 PID: 11996 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2342.952605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.954385] Call Trace: [ 2342.954967] dump_stack+0x107/0x167 [ 2342.955772] should_fail.cold+0x5/0xa [ 2342.956592] ? io_poll_remove_entries+0x30a/0x540 [ 2342.957634] ? create_object.isra.0+0x3a/0xa30 [ 2342.958606] should_failslab+0x5/0x20 [ 2342.959420] kmem_cache_alloc+0x5b/0x310 [ 2342.960294] create_object.isra.0+0x3a/0xa30 [ 2342.961228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2342.962302] kmem_cache_alloc_trace+0x151/0x320 [ 2342.963311] ? lock_downgrade+0x6d0/0x6d0 [ 2342.964196] __io_queue_sqe+0x666/0x9d0 [ 2342.965055] ? io_issue_sqe+0x77d0/0x77d0 [ 2342.965930] ? __fget_files+0x2f8/0x520 [ 2342.966777] ? io_prep_rw+0x7f5/0x1050 [ 2342.967678] io_submit_sqes+0x44ab/0x8610 [ 2342.968759] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2342.970024] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2342.971261] ? find_held_lock+0x2c/0x110 [ 2342.972295] ? io_submit_sqes+0x8610/0x8610 [ 2342.973399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2342.974611] ? wait_for_completion_io+0x270/0x270 [ 2342.975867] ? rcu_read_lock_any_held+0x75/0xa0 [ 2342.977041] ? vfs_write+0x354/0xb10 [ 2342.977990] ? fput_many+0x2f/0x1a0 [ 2342.978913] ? ksys_write+0x1a9/0x260 [ 2342.979883] ? __ia32_sys_read+0xb0/0xb0 [ 2342.980920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2342.982267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2342.983591] do_syscall_64+0x33/0x40 [ 2342.984528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2342.985812] RIP: 0033:0x7f8d46f94b19 [ 2342.986772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.991386] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2342.993289] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2342.995063] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2342.996872] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2342.998655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.000452] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:07:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 03:07:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 03:07:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 03:07:10 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x68000000, 0x0, 0x0, 0x0) 03:07:10 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7400, 0x0, 0x0, 0x0) 03:07:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 03:07:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 03:07:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 03:07:10 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c000000, 0x0, 0x0, 0x0) 03:07:10 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 03:07:10 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 03:07:10 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 03:07:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 03:07:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 03:07:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) [ 2343.531185] FAULT_INJECTION: forcing a failure. [ 2343.531185] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.532562] CPU: 1 PID: 12040 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2343.533351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.534307] Call Trace: [ 2343.534610] dump_stack+0x107/0x167 [ 2343.535021] should_fail.cold+0x5/0xa [ 2343.535462] ? io_setup_async_rw+0x180/0x580 [ 2343.535956] should_failslab+0x5/0x20 [ 2343.536395] __kmalloc+0x72/0x390 [ 2343.536792] io_setup_async_rw+0x180/0x580 [ 2343.537286] ? iov_iter_restore+0x195/0x3a0 [ 2343.537779] io_read+0x775/0x11e0 [ 2343.538184] ? kiocb_done+0xc90/0xc90 [ 2343.538618] ? mark_lock+0xf5/0x2df0 [ 2343.539046] ? lock_chain_count+0x20/0x20 [ 2343.539533] ? stack_trace_consume_entry+0x160/0x160 [ 2343.540120] ? lock_acquire+0x197/0x470 [ 2343.540576] ? __lock_acquire+0xbb1/0x5b00 [ 2343.541067] io_issue_sqe+0x2e8a/0x77d0 [ 2343.541536] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2343.542145] ? lock_chain_count+0x20/0x20 [ 2343.542628] ? __is_insn_slot_addr+0x14c/0x290 [ 2343.543169] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2343.543781] ? io_connect+0x610/0x610 [ 2343.544224] ? lock_acquire+0x197/0x470 [ 2343.544676] ? find_held_lock+0x2c/0x110 [ 2343.545156] ? __fget_files+0x2cf/0x520 [ 2343.545608] ? lock_downgrade+0x6d0/0x6d0 [ 2343.546091] __io_queue_sqe+0x90/0x9d0 [ 2343.546551] ? io_issue_sqe+0x77d0/0x77d0 [ 2343.547019] ? __fget_files+0x2f8/0x520 [ 2343.547481] ? io_prep_rw+0x7f5/0x1050 [ 2343.547931] io_submit_sqes+0x44ab/0x8610 [ 2343.548425] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2343.549009] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2343.549568] ? find_held_lock+0x2c/0x110 [ 2343.550037] ? io_submit_sqes+0x8610/0x8610 [ 2343.550528] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2343.551092] ? wait_for_completion_io+0x270/0x270 [ 2343.551659] ? rcu_read_lock_any_held+0x75/0xa0 [ 2343.552186] ? vfs_write+0x354/0xb10 [ 2343.552618] ? fput_many+0x2f/0x1a0 [ 2343.553036] ? ksys_write+0x1a9/0x260 [ 2343.553495] ? __ia32_sys_read+0xb0/0xb0 [ 2343.553968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.554572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.555168] do_syscall_64+0x33/0x40 [ 2343.555618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2343.556203] RIP: 0033:0x7fe1da102b19 [ 2343.556638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.558750] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2343.559624] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2343.560455] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2343.561265] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.562088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.562911] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2343.566622] FAULT_INJECTION: forcing a failure. [ 2343.566622] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.567929] CPU: 1 PID: 12039 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2343.568714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.569684] Call Trace: [ 2343.569992] dump_stack+0x107/0x167 [ 2343.570410] should_fail.cold+0x5/0xa [ 2343.570840] ? create_object.isra.0+0x3a/0xa30 [ 2343.571373] should_failslab+0x5/0x20 [ 2343.571804] kmem_cache_alloc+0x5b/0x310 [ 2343.572270] create_object.isra.0+0x3a/0xa30 [ 2343.572775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2343.573358] __kmalloc+0x16e/0x390 [ 2343.573774] io_setup_async_rw+0x180/0x580 [ 2343.574259] ? iov_iter_restore+0x195/0x3a0 [ 2343.574777] io_read+0x775/0x11e0 [ 2343.575178] ? __lock_acquire+0x1657/0x5b00 [ 2343.575693] ? kiocb_done+0xc90/0xc90 [ 2343.576131] ? mark_lock+0xf5/0x2df0 [ 2343.576558] ? lock_chain_count+0x20/0x20 [ 2343.577030] ? __lock_acquire+0x1657/0x5b00 [ 2343.577552] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2343.578161] ? lock_chain_count+0x20/0x20 [ 2343.578643] ? __lock_acquire+0xbb1/0x5b00 [ 2343.579123] io_issue_sqe+0x2e8a/0x77d0 [ 2343.579604] ? find_held_lock+0x2c/0x110 [ 2343.580070] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2343.580681] ? io_poll_remove_entries+0x30a/0x540 [ 2343.581233] ? io_connect+0x610/0x610 [ 2343.581670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.582283] ? lock_acquire+0x197/0x470 [ 2343.582736] ? find_held_lock+0x2c/0x110 [ 2343.583201] ? __fget_files+0x2cf/0x520 [ 2343.583670] ? lock_downgrade+0x6d0/0x6d0 [ 2343.584150] __io_queue_sqe+0x90/0x9d0 [ 2343.584593] ? io_issue_sqe+0x77d0/0x77d0 [ 2343.585069] ? __fget_files+0x2f8/0x520 [ 2343.585529] ? io_prep_rw+0x7f5/0x1050 [ 2343.585974] io_submit_sqes+0x44ab/0x8610 [ 2343.586473] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2343.587038] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2343.587602] ? find_held_lock+0x2c/0x110 [ 2343.588073] ? io_submit_sqes+0x8610/0x8610 [ 2343.588577] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2343.589129] ? wait_for_completion_io+0x270/0x270 [ 2343.589694] ? rcu_read_lock_any_held+0x75/0xa0 [ 2343.590228] ? vfs_write+0x354/0xb10 [ 2343.590658] ? fput_many+0x2f/0x1a0 [ 2343.591078] ? ksys_write+0x1a9/0x260 [ 2343.591535] ? __ia32_sys_read+0xb0/0xb0 [ 2343.592000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.592605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2343.593211] do_syscall_64+0x33/0x40 [ 2343.593644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2343.594240] RIP: 0033:0x7f8d46f94b19 [ 2343.594665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.596808] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2343.597684] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2343.598504] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2343.599326] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.600163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.600982] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 [ 2357.775787] FAULT_INJECTION: forcing a failure. [ 2357.775787] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.777529] CPU: 1 PID: 12061 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2357.778500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.779685] Call Trace: [ 2357.780062] dump_stack+0x107/0x167 [ 2357.780578] should_fail.cold+0x5/0xa [ 2357.781117] ? __io_queue_sqe+0x666/0x9d0 [ 2357.781696] should_failslab+0x5/0x20 [ 2357.782232] kmem_cache_alloc_trace+0x55/0x320 [ 2357.782875] ? lock_downgrade+0x6d0/0x6d0 [ 2357.783475] __io_queue_sqe+0x666/0x9d0 [ 2357.784042] ? io_issue_sqe+0x77d0/0x77d0 [ 2357.784639] ? __fget_files+0x2f8/0x520 [ 2357.785202] ? io_prep_rw+0x7f5/0x1050 [ 2357.785753] io_submit_sqes+0x44ab/0x8610 [ 2357.786352] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2357.787303] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2357.788170] ? find_held_lock+0x2c/0x110 [ 2357.788885] ? io_submit_sqes+0x8610/0x8610 [ 2357.789496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2357.790170] ? wait_for_completion_io+0x270/0x270 [ 2357.790844] ? rcu_read_lock_any_held+0x75/0xa0 [ 2357.791505] ? vfs_write+0x354/0xb10 [ 2357.792026] ? fput_many+0x2f/0x1a0 [ 2357.792534] ? ksys_write+0x1a9/0x260 [ 2357.793064] ? __ia32_sys_read+0xb0/0xb0 [ 2357.793634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2357.794367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.795092] do_syscall_64+0x33/0x40 [ 2357.795627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2357.796349] RIP: 0033:0x7f8d46f94b19 [ 2357.796884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.799460] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2357.800532] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2357.801525] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 03:07:25 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c00, 0x0, 0x0, 0x0) 03:07:25 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 03:07:25 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x74000000, 0x0, 0x0, 0x0) 03:07:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 03:07:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 03:07:25 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 03:07:25 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 03:07:25 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 2357.802660] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2357.803939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.804982] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 [ 2357.816006] FAULT_INJECTION: forcing a failure. [ 2357.816006] name failslab, interval 1, probability 0, space 0, times 0 [ 2357.817664] CPU: 1 PID: 12059 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2357.818664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2357.819876] Call Trace: [ 2357.820263] dump_stack+0x107/0x167 [ 2357.820797] should_fail.cold+0x5/0xa [ 2357.821352] ? create_object.isra.0+0x3a/0xa30 [ 2357.822016] should_failslab+0x5/0x20 [ 2357.822578] kmem_cache_alloc+0x5b/0x310 [ 2357.823170] create_object.isra.0+0x3a/0xa30 [ 2357.823818] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2357.824532] __kmalloc+0x16e/0x390 [ 2357.825052] io_setup_async_rw+0x180/0x580 [ 2357.825673] ? iov_iter_restore+0x195/0x3a0 [ 2357.826306] io_read+0x775/0x11e0 [ 2357.826817] ? kiocb_done+0xc90/0xc90 [ 2357.827368] ? mark_lock+0xf5/0x2df0 [ 2357.827927] ? lock_chain_count+0x20/0x20 [ 2357.828538] ? stack_trace_consume_entry+0x160/0x160 [ 2357.829280] ? lock_acquire+0x197/0x470 [ 2357.829863] ? __lock_acquire+0xbb1/0x5b00 [ 2357.830481] io_issue_sqe+0x2e8a/0x77d0 [ 2357.831067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2357.831833] ? lock_chain_count+0x20/0x20 [ 2357.832437] ? __is_insn_slot_addr+0x14c/0x290 [ 2357.833101] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2357.833861] ? io_connect+0x610/0x610 [ 2357.834418] ? lock_acquire+0x197/0x470 [ 2357.834995] ? find_held_lock+0x2c/0x110 [ 2357.835594] ? __fget_files+0x2cf/0x520 [ 2357.836167] ? lock_downgrade+0x6d0/0x6d0 [ 2357.836765] __io_queue_sqe+0x90/0x9d0 [ 2357.837333] ? io_issue_sqe+0x77d0/0x77d0 [ 2357.837928] ? __fget_files+0x2f8/0x520 [ 2357.838511] ? io_prep_rw+0x7f5/0x1050 [ 2357.839073] io_submit_sqes+0x44ab/0x8610 [ 2357.839701] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2357.840417] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2357.841114] ? find_held_lock+0x2c/0x110 [ 2357.841705] ? io_submit_sqes+0x8610/0x8610 [ 2357.842332] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2357.843024] ? wait_for_completion_io+0x270/0x270 [ 2357.843735] ? rcu_read_lock_any_held+0x75/0xa0 [ 2357.844408] ? vfs_write+0x354/0xb10 [ 2357.844944] ? fput_many+0x2f/0x1a0 [ 2357.845464] ? ksys_write+0x1a9/0x260 [ 2357.846015] ? __ia32_sys_read+0xb0/0xb0 [ 2357.846604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2357.847367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2357.848121] do_syscall_64+0x33/0x40 [ 2357.848655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2357.849391] RIP: 0033:0x7fe1da102b19 [ 2357.849924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2357.852638] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2357.853775] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2357.854847] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2357.855922] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2357.856983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.858055] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:07:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 03:07:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 03:07:25 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a000000, 0x0, 0x0, 0x0) 03:07:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 03:07:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 03:07:25 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:07:25 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 03:07:25 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:07:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) [ 2358.226330] FAULT_INJECTION: forcing a failure. [ 2358.226330] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.227731] CPU: 1 PID: 12099 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2358.228532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2358.229496] Call Trace: [ 2358.229809] dump_stack+0x107/0x167 [ 2358.230235] should_fail.cold+0x5/0xa [ 2358.230678] ? __io_queue_sqe+0x666/0x9d0 [ 2358.231164] should_failslab+0x5/0x20 [ 2358.231617] kmem_cache_alloc_trace+0x55/0x320 [ 2358.232157] ? lock_downgrade+0x6d0/0x6d0 [ 2358.232642] __io_queue_sqe+0x666/0x9d0 [ 2358.233105] ? io_issue_sqe+0x77d0/0x77d0 [ 2358.233591] ? __fget_files+0x2f8/0x520 [ 2358.234054] ? io_prep_rw+0x7f5/0x1050 03:07:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) [ 2358.234511] io_submit_sqes+0x44ab/0x8610 [ 2358.235194] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2358.235783] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2358.236345] ? find_held_lock+0x2c/0x110 [ 2358.236823] ? io_submit_sqes+0x8610/0x8610 [ 2358.237338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2358.237904] ? wait_for_completion_io+0x270/0x270 [ 2358.238467] ? rcu_read_lock_any_held+0x75/0xa0 [ 2358.239007] ? vfs_write+0x354/0xb10 [ 2358.239443] ? fput_many+0x2f/0x1a0 [ 2358.239867] ? ksys_write+0x1a9/0x260 [ 2358.240307] ? __ia32_sys_read+0xb0/0xb0 [ 2358.240777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2358.241387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2358.241984] do_syscall_64+0x33/0x40 [ 2358.242414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2358.243007] RIP: 0033:0x7fe1da102b19 [ 2358.243484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2358.245586] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2358.246518] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2358.247401] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2358.248274] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2358.249150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2358.250009] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:07:25 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) [ 2358.318618] FAULT_INJECTION: forcing a failure. [ 2358.318618] name failslab, interval 1, probability 0, space 0, times 0 [ 2358.320027] CPU: 1 PID: 12109 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2358.320820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2358.321773] Call Trace: [ 2358.322087] dump_stack+0x107/0x167 [ 2358.322515] should_fail.cold+0x5/0xa [ 2358.322957] ? io_poll_remove_entries+0x30a/0x540 [ 2358.323511] ? create_object.isra.0+0x3a/0xa30 [ 2358.324040] should_failslab+0x5/0x20 [ 2358.324478] kmem_cache_alloc+0x5b/0x310 [ 2358.324941] create_object.isra.0+0x3a/0xa30 [ 2358.325444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2358.326034] kmem_cache_alloc_trace+0x151/0x320 [ 2358.326579] ? lock_downgrade+0x6d0/0x6d0 [ 2358.327055] __io_queue_sqe+0x666/0x9d0 [ 2358.327531] ? io_issue_sqe+0x77d0/0x77d0 [ 2358.328013] ? __fget_files+0x2f8/0x520 [ 2358.328479] ? io_prep_rw+0x7f5/0x1050 [ 2358.328929] io_submit_sqes+0x44ab/0x8610 [ 2358.329418] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2358.329984] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2358.330539] ? find_held_lock+0x2c/0x110 [ 2358.331002] ? io_submit_sqes+0x8610/0x8610 [ 2358.331509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2358.332068] ? wait_for_completion_io+0x270/0x270 [ 2358.332636] ? rcu_read_lock_any_held+0x75/0xa0 [ 2358.333173] ? vfs_write+0x354/0xb10 [ 2358.333598] ? fput_many+0x2f/0x1a0 [ 2358.334025] ? ksys_write+0x1a9/0x260 [ 2358.334463] ? __ia32_sys_read+0xb0/0xb0 [ 2358.334930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2358.335541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2358.336149] do_syscall_64+0x33/0x40 [ 2358.336578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2358.337171] RIP: 0033:0x7f8d46f94b19 [ 2358.337606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2358.339719] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2358.340590] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2358.341414] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2358.342237] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2358.343054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2358.343894] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:07:38 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 03:07:38 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 03:07:38 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 03:07:38 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 03:07:38 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c000000, 0x0, 0x0, 0x0) 03:07:38 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 03:07:38 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 03:07:38 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2371.465590] FAULT_INJECTION: forcing a failure. [ 2371.465590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.468914] CPU: 0 PID: 12123 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2371.470770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.472565] Call Trace: [ 2371.473243] dump_stack+0x107/0x167 [ 2371.474031] should_fail.cold+0x5/0xa [ 2371.474493] FAULT_INJECTION: forcing a failure. [ 2371.474493] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.474859] _copy_from_user+0x2e/0x1b0 [ 2371.474887] iovec_from_user+0x141/0x400 [ 2371.478997] __import_iovec+0x67/0x590 [ 2371.479844] ? kfree+0xd7/0x340 [ 2371.480567] io_import_iovec+0x581/0x1120 [ 2371.481452] ? io_link_timeout_fn+0x20/0x380 [ 2371.482404] ? io_complete_rw+0x230/0x230 [ 2371.483294] ? io_clean_op+0x30c/0x870 [ 2371.484151] ? kiocb_done+0x16b/0xc90 [ 2371.484984] io_read+0xe14/0x11e0 [ 2371.485740] ? __lock_acquire+0x1657/0x5b00 [ 2371.486673] ? kiocb_done+0xc90/0xc90 [ 2371.487484] ? mark_lock+0xf5/0x2df0 [ 2371.488310] ? lock_chain_count+0x20/0x20 [ 2371.489195] ? __lock_acquire+0x1657/0x5b00 [ 2371.490133] ? mark_lock+0xf5/0x2df0 [ 2371.490941] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2371.492079] ? lock_chain_count+0x20/0x20 [ 2371.492988] ? __lock_acquire+0xbb1/0x5b00 [ 2371.493903] io_issue_sqe+0x2e8a/0x77d0 [ 2371.494763] ? find_held_lock+0x2c/0x110 [ 2371.495647] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2371.496779] ? io_poll_remove_entries+0x30a/0x540 [ 2371.497815] ? io_connect+0x610/0x610 [ 2371.498637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.499777] ? lock_acquire+0x197/0x470 [ 2371.500624] ? find_held_lock+0x2c/0x110 [ 2371.501501] ? __fget_files+0x2cf/0x520 [ 2371.502348] ? lock_downgrade+0x6d0/0x6d0 [ 2371.503245] __io_queue_sqe+0x90/0x9d0 [ 2371.504093] ? io_issue_sqe+0x77d0/0x77d0 [ 2371.504983] ? __fget_files+0x2f8/0x520 [ 2371.505841] ? io_prep_rw+0x7f5/0x1050 [ 2371.506684] io_submit_sqes+0x44ab/0x8610 [ 2371.507615] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2371.508689] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2371.509726] ? find_held_lock+0x2c/0x110 [ 2371.510603] ? io_submit_sqes+0x8610/0x8610 [ 2371.511533] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.512582] ? wait_for_completion_io+0x270/0x270 [ 2371.513609] ? rcu_read_lock_any_held+0x75/0xa0 [ 2371.514798] ? vfs_write+0x354/0xb10 [ 2371.515671] ? fput_many+0x2f/0x1a0 [ 2371.516610] ? ksys_write+0x1a9/0x260 [ 2371.517595] ? __ia32_sys_read+0xb0/0xb0 [ 2371.518663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.520026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.521373] do_syscall_64+0x33/0x40 [ 2371.522341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.523686] RIP: 0033:0x7f8d46f94b19 [ 2371.524644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.529396] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2371.531353] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2371.533197] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2371.535044] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.536895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.538751] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 [ 2371.540649] CPU: 1 PID: 12133 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2371.542175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.543916] Call Trace: [ 2371.544476] dump_stack+0x107/0x167 [ 2371.545234] should_fail.cold+0x5/0xa [ 2371.546028] should_failslab+0x5/0x20 [ 2371.546847] kmem_cache_alloc_bulk+0x4b/0x320 [ 2371.547816] io_submit_sqes+0x6fe7/0x8610 [ 2371.548700] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2371.549752] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2371.550808] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2371.551834] ? find_held_lock+0x2c/0x110 [ 2371.552702] ? io_submit_sqes+0x8610/0x8610 [ 2371.553629] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.554649] ? wait_for_completion_io+0x270/0x270 [ 2371.555687] ? rcu_read_lock_any_held+0x75/0xa0 [ 2371.556663] ? vfs_write+0x354/0xb10 [ 2371.557451] ? fput_many+0x2f/0x1a0 [ 2371.558220] ? ksys_write+0x1a9/0x260 [ 2371.559022] ? __ia32_sys_read+0xb0/0xb0 [ 2371.559900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.561003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.562099] do_syscall_64+0x33/0x40 [ 2371.562891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.563982] RIP: 0033:0x7f01ae28cb19 [ 2371.564778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.568677] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2371.570303] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2371.571811] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2371.573321] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.574843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.576358] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2371.609404] FAULT_INJECTION: forcing a failure. [ 2371.609404] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.611928] CPU: 0 PID: 12132 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2371.613396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.615159] Call Trace: [ 2371.615752] dump_stack+0x107/0x167 [ 2371.616538] should_fail.cold+0x5/0xa [ 2371.617380] ? create_object.isra.0+0x3a/0xa30 [ 2371.618368] should_failslab+0x5/0x20 [ 2371.619343] kmem_cache_alloc+0x5b/0x310 [ 2371.620268] create_object.isra.0+0x3a/0xa30 [ 2371.621392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.622720] kmem_cache_alloc_trace+0x151/0x320 [ 2371.623953] ? lock_downgrade+0x6d0/0x6d0 [ 2371.625055] __io_queue_sqe+0x666/0x9d0 [ 2371.626101] ? io_issue_sqe+0x77d0/0x77d0 [ 2371.627177] ? __fget_files+0x2f8/0x520 [ 2371.628225] ? io_prep_rw+0x7f5/0x1050 [ 2371.629245] io_submit_sqes+0x44ab/0x8610 [ 2371.630364] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2371.631672] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2371.632931] ? find_held_lock+0x2c/0x110 [ 2371.634001] ? io_submit_sqes+0x8610/0x8610 [ 2371.635123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.636402] ? wait_for_completion_io+0x270/0x270 [ 2371.637658] ? rcu_read_lock_any_held+0x75/0xa0 [ 2371.638872] ? vfs_write+0x354/0xb10 [ 2371.639861] ? fput_many+0x2f/0x1a0 [ 2371.640821] ? ksys_write+0x1a9/0x260 [ 2371.641817] ? __ia32_sys_read+0xb0/0xb0 [ 2371.642881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.644254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.645583] do_syscall_64+0x33/0x40 [ 2371.646537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2371.647869] RIP: 0033:0x7fe1da102b19 [ 2371.648834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.653596] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2371.655579] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2371.657434] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2371.659269] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.661126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.662943] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:07:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 03:07:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 03:07:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 03:07:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 03:07:39 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 03:07:39 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 03:07:39 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) [ 2372.093372] FAULT_INJECTION: forcing a failure. [ 2372.093372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2372.096323] CPU: 0 PID: 12155 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2372.097725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.099420] Call Trace: [ 2372.099979] dump_stack+0x107/0x167 [ 2372.100729] should_fail.cold+0x5/0xa [ 2372.101517] __alloc_pages_nodemask+0x182/0x600 [ 2372.102471] ? mark_held_locks+0x9e/0xe0 [ 2372.103316] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2372.104558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.105636] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2372.106761] alloc_pages_current+0x187/0x280 [ 2372.107672] ? allocate_slab+0x2ad/0x380 [ 2372.108514] allocate_slab+0x26f/0x380 [ 2372.109315] ___slab_alloc+0x470/0x700 [ 2372.110116] ? io_submit_sqes+0x6fe7/0x8610 [ 2372.111017] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2372.111995] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2372.112938] io_submit_sqes+0x6fe7/0x8610 [ 2372.113800] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2372.114821] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2372.115848] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2372.116840] ? find_held_lock+0x2c/0x110 [ 2372.117673] ? io_submit_sqes+0x8610/0x8610 [ 2372.118553] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2372.119535] ? wait_for_completion_io+0x270/0x270 [ 2372.120524] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.121466] ? vfs_write+0x354/0xb10 [ 2372.122222] ? fput_many+0x2f/0x1a0 [ 2372.122967] ? ksys_write+0x1a9/0x260 [ 2372.123752] ? __ia32_sys_read+0xb0/0xb0 [ 2372.124586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.125646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.126693] do_syscall_64+0x33/0x40 [ 2372.127430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2372.128693] RIP: 0033:0x7f01ae28cb19 [ 2372.129612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.134075] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2372.135956] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2372.137735] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2372.139492] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.141229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2372.142952] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:07:39 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 03:07:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) [ 2372.169874] FAULT_INJECTION: forcing a failure. [ 2372.169874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.172480] CPU: 1 PID: 12162 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2372.173921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2372.175655] Call Trace: [ 2372.176220] dump_stack+0x107/0x167 [ 2372.176986] should_fail.cold+0x5/0xa [ 2372.177789] _copy_from_user+0x2e/0x1b0 [ 2372.178621] iovec_from_user+0x141/0x400 [ 2372.179484] __import_iovec+0x67/0x590 [ 2372.180305] ? kfree+0xd7/0x340 [ 2372.181008] io_import_iovec+0x581/0x1120 [ 2372.181875] ? io_link_timeout_fn+0x20/0x380 [ 2372.182796] ? io_complete_rw+0x230/0x230 [ 2372.183667] ? io_clean_op+0x30c/0x870 [ 2372.184487] ? kiocb_done+0x16b/0xc90 [ 2372.185306] io_read+0xe14/0x11e0 [ 2372.186037] ? __lock_acquire+0x1657/0x5b00 [ 2372.186942] ? kiocb_done+0xc90/0xc90 [ 2372.187745] ? mark_lock+0xf5/0x2df0 [ 2372.188534] ? lock_chain_count+0x20/0x20 [ 2372.189396] ? __lock_acquire+0x1657/0x5b00 [ 2372.190303] ? mark_lock+0xf5/0x2df0 [ 2372.191085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.192193] ? lock_chain_count+0x20/0x20 [ 2372.193059] ? __lock_acquire+0xbb1/0x5b00 [ 2372.193951] io_issue_sqe+0x2e8a/0x77d0 [ 2372.194788] ? find_held_lock+0x2c/0x110 [ 2372.195645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2372.196746] ? io_poll_remove_entries+0x30a/0x540 [ 2372.197752] ? io_connect+0x610/0x610 [ 2372.198543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.199643] ? lock_acquire+0x197/0x470 [ 2372.200473] ? find_held_lock+0x2c/0x110 [ 2372.201326] ? __fget_files+0x2cf/0x520 [ 2372.202164] ? lock_downgrade+0x6d0/0x6d0 [ 2372.203035] __io_queue_sqe+0x90/0x9d0 [ 2372.203871] ? io_issue_sqe+0x77d0/0x77d0 [ 2372.204732] ? __fget_files+0x2f8/0x520 [ 2372.205565] ? io_prep_rw+0x7f5/0x1050 [ 2372.206397] io_submit_sqes+0x44ab/0x8610 [ 2372.207289] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2372.208338] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2372.209342] ? find_held_lock+0x2c/0x110 [ 2372.210208] ? io_submit_sqes+0x8610/0x8610 [ 2372.211125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2372.212142] ? wait_for_completion_io+0x270/0x270 [ 2372.213148] ? rcu_read_lock_any_held+0x75/0xa0 [ 2372.214121] ? vfs_write+0x354/0xb10 [ 2372.214900] ? fput_many+0x2f/0x1a0 [ 2372.215682] ? ksys_write+0x1a9/0x260 [ 2372.216477] ? __ia32_sys_read+0xb0/0xb0 [ 2372.217335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2372.218430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2372.219533] do_syscall_64+0x33/0x40 [ 2372.220325] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2372.221405] RIP: 0033:0x7fe1da102b19 [ 2372.222189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2372.226044] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2372.227633] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2372.229119] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2372.230609] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2372.232111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2372.233596] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:07:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 03:07:55 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 03:07:55 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 03:07:55 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 03:07:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 03:07:55 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 03:07:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 03:07:55 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 03:07:55 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) [ 2387.730685] FAULT_INJECTION: forcing a failure. [ 2387.730685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.733459] CPU: 0 PID: 12180 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2387.734906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.736640] Call Trace: [ 2387.737196] dump_stack+0x107/0x167 [ 2387.737956] should_fail.cold+0x5/0xa [ 2387.738764] _copy_to_iter+0x264/0x12d0 [ 2387.739620] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.740625] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2387.741658] ? __virt_addr_valid+0x170/0x5d0 [ 2387.742581] ? __check_object_size+0x319/0x440 [ 2387.743546] seq_read_iter+0xdcb/0x12b0 [ 2387.744395] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2387.745420] kernfs_fop_read_iter+0x456/0x5f0 [ 2387.746363] ? rw_verify_area+0x11d/0x350 [ 2387.747223] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2387.748245] io_read+0x2dc/0x11e0 [ 2387.748981] ? __lock_acquire+0x1657/0x5b00 [ 2387.749880] ? kiocb_done+0xc90/0xc90 [ 2387.750669] ? mark_lock+0xf5/0x2df0 [ 2387.751451] ? lock_chain_count+0x20/0x20 [ 2387.752321] ? __lock_acquire+0x1657/0x5b00 [ 2387.753242] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.754335] ? lock_chain_count+0x20/0x20 [ 2387.755211] ? __lock_acquire+0xbb1/0x5b00 [ 2387.756116] io_issue_sqe+0x2e8a/0x77d0 [ 2387.756958] ? find_held_lock+0x2c/0x110 [ 2387.757812] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.758913] ? io_poll_remove_entries+0x30a/0x540 [ 2387.759929] ? io_connect+0x610/0x610 [ 2387.760727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.761827] ? lock_acquire+0x197/0x470 [ 2387.762655] ? find_held_lock+0x2c/0x110 [ 2387.763517] ? __fget_files+0x2cf/0x520 [ 2387.764362] ? lock_downgrade+0x6d0/0x6d0 [ 2387.765234] __io_queue_sqe+0x90/0x9d0 [ 2387.766059] ? io_issue_sqe+0x77d0/0x77d0 [ 2387.766924] ? __fget_files+0x2f8/0x520 [ 2387.767771] ? io_prep_rw+0x7f5/0x1050 [ 2387.768593] io_submit_sqes+0x44ab/0x8610 [ 2387.769487] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2387.770526] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2387.771535] ? find_held_lock+0x2c/0x110 [ 2387.772407] ? io_submit_sqes+0x8610/0x8610 [ 2387.773315] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.774330] ? wait_for_completion_io+0x270/0x270 [ 2387.775340] ? rcu_read_lock_any_held+0x75/0xa0 [ 2387.776320] ? vfs_write+0x354/0xb10 03:07:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) [ 2387.777104] ? fput_many+0x2f/0x1a0 [ 2387.778056] ? ksys_write+0x1a9/0x260 [ 2387.778862] ? __ia32_sys_read+0xb0/0xb0 [ 2387.779717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.780832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.781920] do_syscall_64+0x33/0x40 [ 2387.782708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2387.783788] RIP: 0033:0x7fe1da102b19 [ 2387.784572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.788427] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.790028] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2387.791526] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2387.793033] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.794522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2387.796020] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 [ 2387.813738] FAULT_INJECTION: forcing a failure. [ 2387.813738] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.816227] CPU: 1 PID: 12188 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2387.817643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.818610] FAULT_INJECTION: forcing a failure. [ 2387.818610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.819386] Call Trace: [ 2387.819421] dump_stack+0x107/0x167 [ 2387.819451] should_fail.cold+0x5/0xa [ 2387.819481] ? create_object.isra.0+0x3a/0xa30 [ 2387.824829] should_failslab+0x5/0x20 [ 2387.825613] kmem_cache_alloc+0x5b/0x310 [ 2387.826450] ? mark_held_locks+0x9e/0xe0 [ 2387.827279] create_object.isra.0+0x3a/0xa30 [ 2387.828198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2387.829243] kmem_cache_alloc_bulk+0x168/0x320 [ 2387.830188] io_submit_sqes+0x6fe7/0x8610 [ 2387.831066] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2387.832091] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2387.833117] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2387.834110] ? find_held_lock+0x2c/0x110 [ 2387.834946] ? io_submit_sqes+0x8610/0x8610 [ 2387.835846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.836851] ? wait_for_completion_io+0x270/0x270 [ 2387.837840] ? rcu_read_lock_any_held+0x75/0xa0 [ 2387.838820] ? vfs_write+0x354/0xb10 [ 2387.839586] ? fput_many+0x2f/0x1a0 [ 2387.840349] ? ksys_write+0x1a9/0x260 [ 2387.841133] ? __ia32_sys_read+0xb0/0xb0 [ 2387.841971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.843065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.844132] do_syscall_64+0x33/0x40 [ 2387.844896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2387.845959] RIP: 0033:0x7f01ae28cb19 [ 2387.846744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.850591] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.852154] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2387.853634] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2387.855094] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.856582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.858057] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2387.859548] CPU: 0 PID: 12186 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2387.861033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.862772] Call Trace: [ 2387.863334] dump_stack+0x107/0x167 [ 2387.864114] should_fail.cold+0x5/0xa [ 2387.864918] _copy_to_iter+0x264/0x12d0 [ 2387.865757] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2387.866893] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2387.867931] ? __check_object_size+0xce/0x440 [ 2387.868869] ? __check_object_size+0xdc/0x440 [ 2387.869819] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2387.870810] ? __check_object_size+0x319/0x440 [ 2387.871778] seq_read_iter+0xdcb/0x12b0 03:07:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) [ 2387.872628] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2387.873774] kernfs_fop_read_iter+0x456/0x5f0 [ 2387.874720] ? rw_verify_area+0x11d/0x350 [ 2387.875591] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2387.876636] io_read+0x2dc/0x11e0 [ 2387.877374] ? __lock_acquire+0x1657/0x5b00 [ 2387.878284] ? kiocb_done+0xc90/0xc90 [ 2387.879080] ? mark_lock+0xf5/0x2df0 [ 2387.879878] ? lock_chain_count+0x20/0x20 [ 2387.880752] ? __lock_acquire+0x1657/0x5b00 [ 2387.881676] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.882775] ? lock_chain_count+0x20/0x20 [ 2387.883656] ? mark_lock+0xf5/0x2df0 [ 2387.884453] io_issue_sqe+0x2e8a/0x77d0 [ 2387.885288] ? find_held_lock+0x2c/0x110 [ 2387.886145] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2387.887243] ? io_poll_remove_entries+0x30a/0x540 [ 2387.888267] ? io_connect+0x610/0x610 [ 2387.889063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.890175] ? mark_held_locks+0x9e/0xe0 [ 2387.891030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.892145] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2387.893279] __io_queue_sqe+0x90/0x9d0 [ 2387.894102] ? io_issue_sqe+0x77d0/0x77d0 [ 2387.894977] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 2387.896119] ? io_prep_rw+0x7f5/0x1050 [ 2387.896940] io_submit_sqes+0x44ab/0x8610 [ 2387.897836] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2387.898879] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2387.899907] ? find_held_lock+0x2c/0x110 [ 2387.900764] ? io_submit_sqes+0x8610/0x8610 [ 2387.901678] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2387.902688] ? wait_for_completion_io+0x270/0x270 [ 2387.903703] ? rcu_read_lock_any_held+0x75/0xa0 [ 2387.904689] ? vfs_write+0x354/0xb10 [ 2387.905465] ? fput_many+0x2f/0x1a0 [ 2387.906231] ? ksys_write+0x1a9/0x260 [ 2387.907027] ? __ia32_sys_read+0xb0/0xb0 [ 2387.907893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.908994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.910087] do_syscall_64+0x33/0x40 [ 2387.910866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2387.911948] RIP: 0033:0x7f8d46f94b19 [ 2387.912727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.916585] RSP: 002b:00007f8d4450a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2387.918185] RAX: ffffffffffffffda RBX: 00007f8d470a7f60 RCX: 00007f8d46f94b19 [ 2387.919676] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2387.921187] RBP: 00007f8d4450a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.922679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2387.924180] R13: 00007ffd463b99ff R14: 00007f8d4450a300 R15: 0000000000022000 03:07:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 03:07:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00000000000000, 0x0, 0x0) 03:07:55 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 03:07:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 03:07:55 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 03:07:55 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 03:08:09 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 03:08:09 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 03:08:09 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 03:08:09 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 03:08:09 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) 03:08:09 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:08:09 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200000000000000, 0x0, 0x0) 03:08:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) [ 2402.246041] FAULT_INJECTION: forcing a failure. [ 2402.246041] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.248068] CPU: 1 PID: 12235 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2402.249123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.250408] Call Trace: [ 2402.250825] dump_stack+0x107/0x167 [ 2402.251390] should_fail.cold+0x5/0xa [ 2402.252006] ? create_object.isra.0+0x3a/0xa30 [ 2402.252717] should_failslab+0x5/0x20 [ 2402.253329] kmem_cache_alloc+0x5b/0x310 [ 2402.253970] ? mark_held_locks+0x9e/0xe0 [ 2402.254621] create_object.isra.0+0x3a/0xa30 [ 2402.255323] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2402.256138] kmem_cache_alloc_bulk+0x168/0x320 [ 2402.256867] io_submit_sqes+0x6fe7/0x8610 [ 2402.257527] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2402.258311] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2402.259082] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2402.259844] ? find_held_lock+0x2c/0x110 [ 2402.260486] ? io_submit_sqes+0x8610/0x8610 [ 2402.261176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2402.261932] ? wait_for_completion_io+0x270/0x270 [ 2402.262687] ? rcu_read_lock_any_held+0x75/0xa0 [ 2402.263419] ? vfs_write+0x354/0xb10 [ 2402.264007] ? fput_many+0x2f/0x1a0 [ 2402.264571] ? ksys_write+0x1a9/0x260 [ 2402.265179] ? __ia32_sys_read+0xb0/0xb0 [ 2402.265825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.266654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.267457] do_syscall_64+0x33/0x40 [ 2402.268052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2402.268863] RIP: 0033:0x7f01ae28cb19 [ 2402.269428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2402.272290] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2402.273477] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2402.274584] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2402.275693] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.276795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2402.277881] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2402.280773] FAULT_INJECTION: forcing a failure. [ 2402.280773] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.282601] CPU: 1 PID: 12234 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2402.283677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.285000] Call Trace: [ 2402.285420] dump_stack+0x107/0x167 [ 2402.286010] should_fail.cold+0x5/0xa [ 2402.286623] ? io_setup_async_rw+0x180/0x580 [ 2402.287320] should_failslab+0x5/0x20 [ 2402.287924] __kmalloc+0x72/0x390 [ 2402.288470] io_setup_async_rw+0x180/0x580 [ 2402.289128] ? iov_iter_restore+0x195/0x3a0 [ 2402.289823] io_read+0x775/0x11e0 [ 2402.290348] ? __lock_acquire+0x1657/0x5b00 [ 2402.291028] ? kiocb_done+0xc90/0xc90 [ 2402.291605] ? mark_lock+0xf5/0x2df0 [ 2402.292209] ? lock_chain_count+0x20/0x20 [ 2402.292859] ? __lock_acquire+0x1657/0x5b00 [ 2402.293547] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2402.294372] ? lock_chain_count+0x20/0x20 [ 2402.295039] ? __lock_acquire+0xbb1/0x5b00 [ 2402.295708] io_issue_sqe+0x2e8a/0x77d0 [ 2402.296338] ? find_held_lock+0x2c/0x110 [ 2402.296979] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2402.297802] ? io_poll_remove_entries+0x30a/0x540 [ 2402.298558] ? io_connect+0x610/0x610 [ 2402.299158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.299969] ? lock_acquire+0x197/0x470 [ 2402.300586] ? find_held_lock+0x2c/0x110 [ 2402.301203] ? __fget_files+0x2cf/0x520 [ 2402.301834] ? lock_downgrade+0x6d0/0x6d0 [ 2402.302486] __io_queue_sqe+0x90/0x9d0 [ 2402.303071] ? io_issue_sqe+0x77d0/0x77d0 [ 2402.303734] ? __fget_files+0x2f8/0x520 [ 2402.304384] ? io_prep_rw+0x7f5/0x1050 [ 2402.305001] io_submit_sqes+0x44ab/0x8610 [ 2402.305665] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2402.306460] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2402.307222] ? find_held_lock+0x2c/0x110 [ 2402.307863] ? io_submit_sqes+0x8610/0x8610 [ 2402.308548] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2402.309292] ? wait_for_completion_io+0x270/0x270 [ 2402.310029] ? rcu_read_lock_any_held+0x75/0xa0 [ 2402.310751] ? vfs_write+0x354/0xb10 [ 2402.311339] ? fput_many+0x2f/0x1a0 [ 2402.311922] ? ksys_write+0x1a9/0x260 [ 2402.312511] ? __ia32_sys_read+0xb0/0xb0 [ 2402.313136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.313965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.314773] do_syscall_64+0x33/0x40 [ 2402.315351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2402.316141] RIP: 0033:0x7fe1da102b19 [ 2402.316717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2402.319556] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2402.320755] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2402.321870] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2402.322978] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.324106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.325251] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:08:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 03:08:09 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800000000000000, 0x0, 0x0) 03:08:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 03:08:09 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 03:08:09 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 03:08:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 03:08:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00000000000000, 0x0, 0x0) 03:08:10 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) [ 2402.732047] FAULT_INJECTION: forcing a failure. [ 2402.732047] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.733629] CPU: 1 PID: 12274 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2402.734541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.735631] Call Trace: [ 2402.735985] dump_stack+0x107/0x167 [ 2402.736453] should_fail.cold+0x5/0xa [ 2402.736936] ? create_object.isra.0+0x3a/0xa30 [ 2402.737524] should_failslab+0x5/0x20 [ 2402.738017] kmem_cache_alloc+0x5b/0x310 [ 2402.738540] create_object.isra.0+0x3a/0xa30 [ 2402.739101] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2402.739757] __kmalloc+0x16e/0x390 [ 2402.740219] io_setup_async_rw+0x180/0x580 [ 2402.740757] ? iov_iter_restore+0x195/0x3a0 [ 2402.741310] io_read+0x775/0x11e0 [ 2402.741761] ? __lock_acquire+0x1657/0x5b00 [ 2402.742319] ? kiocb_done+0xc90/0xc90 [ 2402.742803] ? mark_lock+0xf5/0x2df0 [ 2402.743286] ? lock_chain_count+0x20/0x20 [ 2402.743811] ? __lock_acquire+0x1657/0x5b00 [ 2402.744395] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2402.745055] ? lock_chain_count+0x20/0x20 [ 2402.745576] ? __lock_acquire+0xbb1/0x5b00 [ 2402.746112] io_issue_sqe+0x2e8a/0x77d0 [ 2402.746610] ? find_held_lock+0x2c/0x110 [ 2402.747119] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2402.747775] ? io_poll_remove_entries+0x30a/0x540 [ 2402.748407] ? io_connect+0x610/0x610 [ 2402.748901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.749580] ? lock_acquire+0x197/0x470 [ 2402.750093] ? find_held_lock+0x2c/0x110 [ 2402.750627] ? __fget_files+0x2cf/0x520 [ 2402.751140] ? lock_downgrade+0x6d0/0x6d0 [ 2402.751687] __io_queue_sqe+0x90/0x9d0 [ 2402.752189] ? io_issue_sqe+0x77d0/0x77d0 [ 2402.752723] ? __fget_files+0x2f8/0x520 [ 2402.753237] ? io_prep_rw+0x7f5/0x1050 [ 2402.753751] io_submit_sqes+0x44ab/0x8610 [ 2402.754304] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2402.754934] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2402.755549] ? find_held_lock+0x2c/0x110 [ 2402.756084] ? io_submit_sqes+0x8610/0x8610 [ 2402.756636] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2402.757245] ? wait_for_completion_io+0x270/0x270 [ 2402.757852] ? rcu_read_lock_any_held+0x75/0xa0 [ 2402.758434] ? vfs_write+0x354/0xb10 [ 2402.758904] ? fput_many+0x2f/0x1a0 [ 2402.759373] ? ksys_write+0x1a9/0x260 [ 2402.759862] ? __ia32_sys_read+0xb0/0xb0 [ 2402.760397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.761064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.761723] do_syscall_64+0x33/0x40 [ 2402.762194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2402.762844] RIP: 0033:0x7fe1da102b19 [ 2402.763317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2402.765642] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2402.766619] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2402.767531] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2402.768454] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.769361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.770246] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:08:24 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 03:08:24 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 03:08:24 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 03:08:24 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:08:24 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4800, 0x0, 0x0, 0x0) 03:08:24 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 03:08:24 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 03:08:24 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) [ 2416.786520] FAULT_INJECTION: forcing a failure. [ 2416.786520] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.789128] CPU: 0 PID: 12290 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2416.790581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.792321] Call Trace: [ 2416.792884] dump_stack+0x107/0x167 [ 2416.793643] should_fail.cold+0x5/0xa [ 2416.794443] ? create_object.isra.0+0x3a/0xa30 [ 2416.795397] should_failslab+0x5/0x20 [ 2416.796209] kmem_cache_alloc+0x5b/0x310 [ 2416.797067] ? mark_held_locks+0x9e/0xe0 [ 2416.797918] create_object.isra.0+0x3a/0xa30 [ 2416.798832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2416.799909] kmem_cache_alloc_bulk+0x168/0x320 [ 2416.800899] io_submit_sqes+0x6fe7/0x8610 [ 2416.801772] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2416.802825] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2416.803867] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2416.804889] ? find_held_lock+0x2c/0x110 [ 2416.805742] ? io_submit_sqes+0x8610/0x8610 [ 2416.806654] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2416.807671] ? wait_for_completion_io+0x270/0x270 [ 2416.808693] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.809659] ? vfs_write+0x354/0xb10 [ 2416.810430] ? fput_many+0x2f/0x1a0 [ 2416.811197] ? ksys_write+0x1a9/0x260 [ 2416.812003] ? __ia32_sys_read+0xb0/0xb0 [ 2416.812859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.813954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.815038] do_syscall_64+0x33/0x40 [ 2416.815822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2416.816906] RIP: 0033:0x7f01ae28cb19 [ 2416.817683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.821530] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2416.823119] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2416.824640] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2416.826135] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.827640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2416.829149] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2416.846726] FAULT_INJECTION: forcing a failure. [ 2416.846726] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.849346] CPU: 0 PID: 12298 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2416.850796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.852549] Call Trace: [ 2416.853103] dump_stack+0x107/0x167 [ 2416.853868] should_fail.cold+0x5/0xa [ 2416.854668] ? io_setup_async_rw+0x180/0x580 [ 2416.855592] should_failslab+0x5/0x20 [ 2416.856404] __kmalloc+0x72/0x390 [ 2416.857140] io_setup_async_rw+0x180/0x580 [ 2416.858038] ? iov_iter_restore+0x195/0x3a0 [ 2416.858957] io_read+0x775/0x11e0 [ 2416.859692] ? __lock_acquire+0x1657/0x5b00 [ 2416.860609] ? kiocb_done+0xc90/0xc90 [ 2416.861405] ? mark_lock+0xf5/0x2df0 [ 2416.862204] ? lock_chain_count+0x20/0x20 [ 2416.863075] ? __lock_acquire+0x1657/0x5b00 [ 2416.864002] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2416.865114] ? lock_chain_count+0x20/0x20 [ 2416.865990] ? __lock_acquire+0xbb1/0x5b00 [ 2416.866883] io_issue_sqe+0x2e8a/0x77d0 [ 2416.867734] ? find_held_lock+0x2c/0x110 [ 2416.868599] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2416.869698] ? io_poll_remove_entries+0x30a/0x540 [ 2416.870709] ? io_connect+0x610/0x610 [ 2416.871511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.872632] ? lock_acquire+0x197/0x470 [ 2416.873476] ? find_held_lock+0x2c/0x110 [ 2416.874332] ? __fget_files+0x2cf/0x520 [ 2416.875172] ? lock_downgrade+0x6d0/0x6d0 [ 2416.876046] __io_queue_sqe+0x90/0x9d0 [ 2416.876882] ? io_issue_sqe+0x77d0/0x77d0 [ 2416.877755] ? __fget_files+0x2f8/0x520 [ 2416.878593] ? io_prep_rw+0x7f5/0x1050 [ 2416.879416] io_submit_sqes+0x44ab/0x8610 [ 2416.880340] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2416.881382] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2416.882394] ? find_held_lock+0x2c/0x110 [ 2416.883253] ? io_submit_sqes+0x8610/0x8610 [ 2416.884181] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2416.885224] ? wait_for_completion_io+0x270/0x270 [ 2416.886236] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.887211] ? vfs_write+0x354/0xb10 [ 2416.887989] ? fput_many+0x2f/0x1a0 [ 2416.888763] ? ksys_write+0x1a9/0x260 [ 2416.889573] ? __ia32_sys_read+0xb0/0xb0 [ 2416.890429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.891528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.892619] do_syscall_64+0x33/0x40 [ 2416.893403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2416.894474] RIP: 0033:0x7fe1da102b19 [ 2416.895259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.899143] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2416.900757] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2416.902257] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2416.903752] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.905264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.906759] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:08:24 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 03:08:24 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400000000000000, 0x0, 0x0) 03:08:24 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 03:08:24 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c00, 0x0, 0x0, 0x0) 03:08:24 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 03:08:24 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00000000000000, 0x0, 0x0) 03:08:24 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 03:08:24 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) 03:08:39 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 03:08:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000000000000, 0x0, 0x0) 03:08:39 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 03:08:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 03:08:39 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3, 0x0, 0x0, 0x0) 03:08:39 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6800, 0x0, 0x0, 0x0) 03:08:39 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 03:08:39 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2431.798874] FAULT_INJECTION: forcing a failure. [ 2431.798874] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.801569] CPU: 0 PID: 12339 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2431.803052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.804836] Call Trace: [ 2431.805405] dump_stack+0x107/0x167 [ 2431.806188] should_fail.cold+0x5/0xa [ 2431.807005] ? create_object.isra.0+0x3a/0xa30 [ 2431.807983] should_failslab+0x5/0x20 [ 2431.808807] kmem_cache_alloc+0x5b/0x310 [ 2431.809677] ? mark_held_locks+0x9e/0xe0 [ 2431.810550] create_object.isra.0+0x3a/0xa30 [ 2431.811492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2431.812591] kmem_cache_alloc_bulk+0x168/0x320 [ 2431.813583] io_submit_sqes+0x6fe7/0x8610 [ 2431.814484] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2431.815552] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2431.816628] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2431.817672] ? find_held_lock+0x2c/0x110 [ 2431.818550] ? io_submit_sqes+0x8610/0x8610 [ 2431.819480] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2431.820546] ? wait_for_completion_io+0x270/0x270 [ 2431.821590] ? rcu_read_lock_any_held+0x75/0xa0 [ 2431.822588] ? vfs_write+0x354/0xb10 [ 2431.823388] ? fput_many+0x2f/0x1a0 [ 2431.824176] ? ksys_write+0x1a9/0x260 [ 2431.825008] ? __ia32_sys_read+0xb0/0xb0 [ 2431.825886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.827011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.828122] do_syscall_64+0x33/0x40 [ 2431.828945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.830046] RIP: 0033:0x7f01ae28cb19 [ 2431.830846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.834802] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2431.836450] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2431.837983] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2431.839512] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.841049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2431.842585] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2431.876589] FAULT_INJECTION: forcing a failure. [ 2431.876589] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.879373] CPU: 0 PID: 12347 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2431.880873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.882657] Call Trace: [ 2431.883224] dump_stack+0x107/0x167 [ 2431.884009] should_fail.cold+0x5/0xa [ 2431.884843] ? io_setup_async_rw+0x180/0x580 [ 2431.885789] should_failslab+0x5/0x20 [ 2431.886604] __kmalloc+0x72/0x390 [ 2431.887351] io_setup_async_rw+0x180/0x580 [ 2431.888267] ? iov_iter_restore+0x195/0x3a0 [ 2431.889202] io_read+0x775/0x11e0 [ 2431.889956] ? __lock_acquire+0x1657/0x5b00 [ 2431.890885] ? kiocb_done+0xc90/0xc90 [ 2431.891699] ? mark_lock+0xf5/0x2df0 [ 2431.892513] ? lock_chain_count+0x20/0x20 [ 2431.893406] ? __lock_acquire+0x1657/0x5b00 [ 2431.894352] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2431.895480] ? lock_chain_count+0x20/0x20 [ 2431.896389] ? __lock_acquire+0xbb1/0x5b00 [ 2431.897301] io_issue_sqe+0x2e8a/0x77d0 [ 2431.898202] ? find_held_lock+0x2c/0x110 [ 2431.899077] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2431.900200] ? io_poll_remove_entries+0x30a/0x540 [ 2431.901248] ? io_connect+0x610/0x610 [ 2431.902065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.903200] ? lock_acquire+0x197/0x470 [ 2431.904056] ? find_held_lock+0x2c/0x110 [ 2431.904945] ? __fget_files+0x2cf/0x520 [ 2431.905797] ? lock_downgrade+0x6d0/0x6d0 [ 2431.906688] __io_queue_sqe+0x90/0x9d0 [ 2431.907533] ? io_issue_sqe+0x77d0/0x77d0 [ 2431.908428] ? __fget_files+0x2f8/0x520 [ 2431.909284] ? io_prep_rw+0x7f5/0x1050 [ 2431.910122] io_submit_sqes+0x44ab/0x8610 [ 2431.911043] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2431.912111] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2431.913157] ? find_held_lock+0x2c/0x110 [ 2431.914031] ? io_submit_sqes+0x8610/0x8610 [ 2431.914965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2431.916000] ? wait_for_completion_io+0x270/0x270 [ 2431.917041] ? rcu_read_lock_any_held+0x75/0xa0 [ 2431.918041] ? vfs_write+0x354/0xb10 [ 2431.918822] ? fput_many+0x2f/0x1a0 [ 2431.919588] ? ksys_write+0x1a9/0x260 [ 2431.920403] ? __ia32_sys_read+0xb0/0xb0 [ 2431.921260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.922358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.923443] do_syscall_64+0x33/0x40 [ 2431.924223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.925335] RIP: 0033:0x7fe1da102b19 [ 2431.926126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.930074] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2431.931712] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2431.933228] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2431.934733] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.936233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.937743] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:08:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 03:08:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600000000000000, 0x0, 0x0) 03:08:39 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) 03:08:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00000000000000, 0x0, 0x0) 03:08:39 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 03:08:39 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 03:08:39 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c00, 0x0, 0x0, 0x0) 03:08:39 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) 03:08:54 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 03:08:54 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x48000000, 0x0, 0x0, 0x0) 03:08:54 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7400, 0x0, 0x0, 0x0) 03:08:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 03:08:54 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) 03:08:54 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0) 03:08:54 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 03:08:54 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) [ 2447.395038] FAULT_INJECTION: forcing a failure. [ 2447.395038] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.396188] FAULT_INJECTION: forcing a failure. [ 2447.396188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2447.397944] CPU: 0 PID: 12394 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2447.401637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.403491] Call Trace: [ 2447.404097] dump_stack+0x107/0x167 [ 2447.404934] should_fail.cold+0x5/0xa [ 2447.405795] ? create_object.isra.0+0x3a/0xa30 [ 2447.406827] should_failslab+0x5/0x20 [ 2447.407689] kmem_cache_alloc+0x5b/0x310 [ 2447.408618] ? mark_held_locks+0x9e/0xe0 [ 2447.409534] create_object.isra.0+0x3a/0xa30 [ 2447.410517] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2447.411666] kmem_cache_alloc_bulk+0x168/0x320 [ 2447.412728] io_submit_sqes+0x6fe7/0x8610 [ 2447.413672] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2447.414788] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2447.415907] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2447.417011] ? find_held_lock+0x2c/0x110 [ 2447.417927] ? io_submit_sqes+0x8610/0x8610 [ 2447.418910] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2447.419994] ? wait_for_completion_io+0x270/0x270 [ 2447.421152] ? rcu_read_lock_any_held+0x75/0xa0 [ 2447.422200] ? vfs_write+0x354/0xb10 [ 2447.423037] ? fput_many+0x2f/0x1a0 [ 2447.423861] ? ksys_write+0x1a9/0x260 [ 2447.424729] ? __ia32_sys_read+0xb0/0xb0 [ 2447.425652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.426836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.427996] do_syscall_64+0x33/0x40 [ 2447.428863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2447.429992] RIP: 0033:0x7f01ae28cb19 [ 2447.430826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.434844] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2447.436557] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2447.438153] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2447.439745] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.441354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2447.442940] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2447.444587] CPU: 1 PID: 12403 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2447.446054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2447.447808] Call Trace: [ 2447.448372] dump_stack+0x107/0x167 [ 2447.449154] should_fail.cold+0x5/0xa [ 2447.449966] _copy_from_user+0x2e/0x1b0 [ 2447.450812] iovec_from_user+0x141/0x400 [ 2447.451673] __import_iovec+0x67/0x590 [ 2447.452509] ? kfree+0xd7/0x340 [ 2447.453224] io_import_iovec+0x581/0x1120 [ 2447.454096] ? io_link_timeout_fn+0x20/0x380 [ 2447.455032] ? io_complete_rw+0x230/0x230 [ 2447.455897] ? io_clean_op+0x30c/0x870 [ 2447.456730] ? kiocb_done+0x16b/0xc90 [ 2447.457534] io_read+0xe14/0x11e0 [ 2447.458271] ? __lock_acquire+0x1657/0x5b00 [ 2447.459177] ? kiocb_done+0xc90/0xc90 [ 2447.459974] ? mark_lock+0xf5/0x2df0 [ 2447.460769] ? lock_chain_count+0x20/0x20 [ 2447.461651] ? __lock_acquire+0x1657/0x5b00 [ 2447.462578] ? mark_lock+0xf5/0x2df0 [ 2447.463365] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2447.464476] ? lock_chain_count+0x20/0x20 [ 2447.465357] ? __lock_acquire+0xbb1/0x5b00 [ 2447.466248] io_issue_sqe+0x2e8a/0x77d0 [ 2447.467090] ? find_held_lock+0x2c/0x110 [ 2447.467948] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2447.469073] ? io_poll_remove_entries+0x30a/0x540 [ 2447.470090] ? io_connect+0x610/0x610 [ 2447.470890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.472002] ? lock_acquire+0x197/0x470 [ 2447.472844] ? find_held_lock+0x2c/0x110 [ 2447.473695] ? __fget_files+0x2cf/0x520 [ 2447.474544] ? lock_downgrade+0x6d0/0x6d0 [ 2447.475424] __io_queue_sqe+0x90/0x9d0 [ 2447.476269] ? io_issue_sqe+0x77d0/0x77d0 [ 2447.477144] ? __fget_files+0x2f8/0x520 [ 2447.477986] ? io_prep_rw+0x7f5/0x1050 [ 2447.478807] io_submit_sqes+0x44ab/0x8610 [ 2447.479705] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2447.480756] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2447.481771] ? find_held_lock+0x2c/0x110 [ 2447.482636] ? io_submit_sqes+0x8610/0x8610 [ 2447.483562] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2447.484576] ? wait_for_completion_io+0x270/0x270 [ 2447.485595] ? rcu_read_lock_any_held+0x75/0xa0 [ 2447.486568] ? vfs_write+0x354/0xb10 [ 2447.487358] ? fput_many+0x2f/0x1a0 [ 2447.488126] ? ksys_write+0x1a9/0x260 [ 2447.488936] ? __ia32_sys_read+0xb0/0xb0 [ 2447.489797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2447.490898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2447.491977] do_syscall_64+0x33/0x40 [ 2447.492773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2447.493847] RIP: 0033:0x7fe1da102b19 [ 2447.494637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2447.498529] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2447.500145] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2447.501666] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2447.503165] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.504680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2447.506184] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:08:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 03:08:54 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 03:08:55 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a00, 0x0, 0x0, 0x0) 03:08:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 03:08:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 03:08:55 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c000000, 0x0, 0x0, 0x0) 03:09:10 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 03:09:10 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 03:09:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c00, 0x0, 0x0, 0x0) 03:09:10 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) 03:09:10 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) 03:09:10 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x68000000, 0x0, 0x0, 0x0) 03:09:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 03:09:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) [ 2462.693551] FAULT_INJECTION: forcing a failure. [ 2462.693551] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.696694] CPU: 1 PID: 12447 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2462.698325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.700223] Call Trace: [ 2462.700861] dump_stack+0x107/0x167 [ 2462.701651] should_fail.cold+0x5/0xa [ 2462.702454] ? create_object.isra.0+0x3a/0xa30 [ 2462.703410] should_failslab+0x5/0x20 [ 2462.704206] kmem_cache_alloc+0x5b/0x310 [ 2462.705064] ? mark_held_locks+0x9e/0xe0 [ 2462.705915] create_object.isra.0+0x3a/0xa30 [ 2462.706836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.707906] kmem_cache_alloc_bulk+0x168/0x320 [ 2462.708884] io_submit_sqes+0x6fe7/0x8610 [ 2462.709767] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2462.710810] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2462.711872] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2462.712916] ? find_held_lock+0x2c/0x110 [ 2462.713782] ? io_submit_sqes+0x8610/0x8610 [ 2462.714701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.715717] ? wait_for_completion_io+0x270/0x270 [ 2462.716750] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.717736] ? vfs_write+0x354/0xb10 [ 2462.718526] ? fput_many+0x2f/0x1a0 [ 2462.719294] ? ksys_write+0x1a9/0x260 [ 2462.720104] ? __ia32_sys_read+0xb0/0xb0 [ 2462.720981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.722097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.723202] do_syscall_64+0x33/0x40 [ 2462.723993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.725085] RIP: 0033:0x7f01ae28cb19 [ 2462.725877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.729817] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2462.731456] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2462.733000] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2462.734538] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.736066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.737593] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2462.741554] FAULT_INJECTION: forcing a failure. [ 2462.741554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.744099] CPU: 1 PID: 12444 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2462.745606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.747415] Call Trace: [ 2462.747987] dump_stack+0x107/0x167 [ 2462.748793] should_fail.cold+0x5/0xa [ 2462.749631] _copy_to_iter+0x264/0x12d0 [ 2462.750511] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.751556] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2462.752633] ? __virt_addr_valid+0x170/0x5d0 [ 2462.753593] ? __check_object_size+0x319/0x440 [ 2462.754606] seq_read_iter+0xdcb/0x12b0 [ 2462.755501] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2462.756567] kernfs_fop_read_iter+0x456/0x5f0 [ 2462.757539] ? rw_verify_area+0x11d/0x350 [ 2462.758452] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2462.759529] io_read+0x2dc/0x11e0 [ 2462.760305] ? __lock_acquire+0x1657/0x5b00 [ 2462.761239] ? kiocb_done+0xc90/0xc90 [ 2462.762073] ? mark_lock+0xf5/0x2df0 [ 2462.762909] ? lock_chain_count+0x20/0x20 [ 2462.763823] ? __lock_acquire+0x1657/0x5b00 [ 2462.764791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2462.765940] ? lock_chain_count+0x20/0x20 [ 2462.766864] ? __lock_acquire+0xbb1/0x5b00 [ 2462.767806] io_issue_sqe+0x2e8a/0x77d0 [ 2462.768698] ? find_held_lock+0x2c/0x110 [ 2462.769599] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2462.770771] ? io_poll_remove_entries+0x30a/0x540 [ 2462.771841] ? io_connect+0x610/0x610 [ 2462.772679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.773826] ? lock_acquire+0x197/0x470 [ 2462.774711] ? find_held_lock+0x2c/0x110 [ 2462.775623] ? __fget_files+0x2cf/0x520 [ 2462.776512] ? lock_downgrade+0x6d0/0x6d0 [ 2462.777461] __io_queue_sqe+0x90/0x9d0 [ 2462.778343] ? io_issue_sqe+0x77d0/0x77d0 [ 2462.779280] ? __fget_files+0x2f8/0x520 [ 2462.780178] ? io_prep_rw+0x7f5/0x1050 [ 2462.781068] io_submit_sqes+0x44ab/0x8610 [ 2462.782030] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2462.783097] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2462.784187] ? find_held_lock+0x2c/0x110 [ 2462.785126] ? io_submit_sqes+0x8610/0x8610 [ 2462.786110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.787206] ? wait_for_completion_io+0x270/0x270 [ 2462.788298] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.789360] ? vfs_write+0x354/0xb10 [ 2462.790202] ? fput_many+0x2f/0x1a0 [ 2462.791030] ? ksys_write+0x1a9/0x260 [ 2462.791903] ? __ia32_sys_read+0xb0/0xb0 [ 2462.792850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.794048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.795241] do_syscall_64+0x33/0x40 03:09:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) [ 2462.796099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.797591] RIP: 0033:0x7fe1da102b19 03:09:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) [ 2462.798448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.802822] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2462.804510] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2462.806200] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2462.807870] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.809454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.811118] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:09:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 03:09:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc) 03:09:10 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c000000, 0x0, 0x0, 0x0) 03:09:10 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 03:09:10 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 03:09:10 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7, 0x0, 0x0) 03:09:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12) 03:09:10 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 2463.504934] FAULT_INJECTION: forcing a failure. [ 2463.504934] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.507546] CPU: 1 PID: 12487 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2463.509001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2463.511046] Call Trace: [ 2463.511755] dump_stack+0x107/0x167 [ 2463.512638] should_fail.cold+0x5/0xa [ 2463.513584] ? create_object.isra.0+0x3a/0xa30 [ 2463.514713] should_failslab+0x5/0x20 [ 2463.515603] kmem_cache_alloc+0x5b/0x310 [ 2463.516673] ? mark_held_locks+0x9e/0xe0 [ 2463.517526] create_object.isra.0+0x3a/0xa30 [ 2463.518437] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2463.519746] kmem_cache_alloc_bulk+0x168/0x320 [ 2463.520855] io_submit_sqes+0x6fe7/0x8610 [ 2463.521902] ? __io_uring_add_tctx_node+0xe6/0x520 [ 2463.523089] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2463.524290] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2463.525512] ? find_held_lock+0x2c/0x110 [ 2463.526494] ? io_submit_sqes+0x8610/0x8610 [ 2463.527543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2463.528794] ? wait_for_completion_io+0x270/0x270 [ 2463.529985] ? rcu_read_lock_any_held+0x75/0xa0 [ 2463.531179] ? vfs_write+0x354/0xb10 [ 2463.532084] ? fput_many+0x2f/0x1a0 [ 2463.532994] ? ksys_write+0x1a9/0x260 [ 2463.533831] ? __ia32_sys_read+0xb0/0xb0 [ 2463.534852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2463.536190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2463.537514] do_syscall_64+0x33/0x40 [ 2463.538424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2463.539656] RIP: 0033:0x7f01ae28cb19 [ 2463.540620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.545109] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2463.547048] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2463.548889] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2463.550402] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2463.551848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2463.553601] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:09:26 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 03:09:26 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 03:09:26 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7, 0x0, 0x0, 0x0) 03:09:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18) 03:09:26 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x74000000, 0x0, 0x0, 0x0) 03:09:26 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 03:09:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 03:09:26 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) [ 2479.464606] FAULT_INJECTION: forcing a failure. [ 2479.464606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2479.467204] CPU: 0 PID: 12505 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2479.468648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2479.470391] Call Trace: [ 2479.470949] dump_stack+0x107/0x167 [ 2479.471716] should_fail.cold+0x5/0xa [ 2479.472515] _copy_from_user+0x2e/0x1b0 [ 2479.473363] iovec_from_user+0x141/0x400 [ 2479.474231] __import_iovec+0x67/0x590 [ 2479.475040] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2479.476139] io_import_iovec+0x581/0x1120 [ 2479.477035] ? io_complete_rw+0x230/0x230 [ 2479.477904] ? lock_downgrade+0x6d0/0x6d0 [ 2479.478776] ? unwind_next_frame+0x13ef/0x1a90 [ 2479.479741] io_read+0xe14/0x11e0 [ 2479.480489] ? kiocb_done+0xc90/0xc90 [ 2479.481298] ? mark_lock+0xf5/0x2df0 [ 2479.482082] ? lock_chain_count+0x20/0x20 [ 2479.482958] ? lock_chain_count+0x20/0x20 [ 2479.483835] ? stack_trace_save+0x8c/0xc0 [ 2479.484708] ? stack_trace_consume_entry+0x160/0x160 [ 2479.485792] ? lock_acquire+0x197/0x470 [ 2479.486634] ? __lock_acquire+0xbb1/0x5b00 [ 2479.487532] io_issue_sqe+0x2e8a/0x77d0 [ 2479.488369] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2479.488912] FAULT_INJECTION: forcing a failure. [ 2479.488912] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.489484] ? lock_chain_count+0x20/0x20 [ 2479.489504] ? __is_insn_slot_addr+0x14c/0x290 [ 2479.489533] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2479.494809] ? io_connect+0x610/0x610 [ 2479.495623] ? lock_acquire+0x197/0x470 [ 2479.496469] ? find_held_lock+0x2c/0x110 [ 2479.497345] ? __fget_files+0x2cf/0x520 [ 2479.498182] ? lock_downgrade+0x6d0/0x6d0 [ 2479.499055] __io_queue_sqe+0x90/0x9d0 [ 2479.499875] ? io_issue_sqe+0x77d0/0x77d0 [ 2479.500742] ? __fget_files+0x2f8/0x520 [ 2479.501589] ? io_prep_rw+0x7f5/0x1050 [ 2479.502406] io_submit_sqes+0x44ab/0x8610 [ 2479.503295] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2479.504328] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2479.505344] ? find_held_lock+0x2c/0x110 [ 2479.506198] ? io_submit_sqes+0x8610/0x8610 [ 2479.507100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2479.508105] ? wait_for_completion_io+0x270/0x270 [ 2479.509119] ? rcu_read_lock_any_held+0x75/0xa0 [ 2479.510084] ? vfs_write+0x354/0xb10 [ 2479.510855] ? fput_many+0x2f/0x1a0 [ 2479.511633] ? ksys_write+0x1a9/0x260 [ 2479.512433] ? __ia32_sys_read+0xb0/0xb0 [ 2479.513291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2479.514383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2479.515465] do_syscall_64+0x33/0x40 [ 2479.516244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2479.517330] RIP: 0033:0x7f01ae28cb19 [ 2479.518112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2479.521963] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2479.523550] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2479.525052] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2479.526540] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2479.528033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2479.529531] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2479.531061] CPU: 1 PID: 12503 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2479.532556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2479.534304] Call Trace: [ 2479.534863] dump_stack+0x107/0x167 [ 2479.535636] should_fail.cold+0x5/0xa [ 2479.536444] ? io_setup_async_rw+0x180/0x580 [ 2479.537374] should_failslab+0x5/0x20 [ 2479.538173] __kmalloc+0x72/0x390 [ 2479.538903] io_setup_async_rw+0x180/0x580 [ 2479.539787] ? iov_iter_restore+0x195/0x3a0 [ 2479.540692] io_read+0x775/0x11e0 [ 2479.541449] ? __lock_acquire+0x1657/0x5b00 [ 2479.542359] ? kiocb_done+0xc90/0xc90 [ 2479.543152] ? mark_lock+0xf5/0x2df0 [ 2479.543940] ? lock_chain_count+0x20/0x20 [ 2479.544818] ? __lock_acquire+0x1657/0x5b00 [ 2479.545757] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2479.546866] ? lock_chain_count+0x20/0x20 [ 2479.547742] ? __lock_acquire+0xbb1/0x5b00 [ 2479.548632] io_issue_sqe+0x2e8a/0x77d0 [ 2479.549477] ? find_held_lock+0x2c/0x110 [ 2479.550337] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2479.551439] ? io_poll_remove_entries+0x30a/0x540 [ 2479.552447] ? io_connect+0x610/0x610 [ 2479.553266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2479.554376] ? lock_acquire+0x197/0x470 [ 2479.555204] ? find_held_lock+0x2c/0x110 [ 2479.556061] ? __fget_files+0x2cf/0x520 [ 2479.556909] ? lock_downgrade+0x6d0/0x6d0 [ 2479.557783] __io_queue_sqe+0x90/0x9d0 [ 2479.558605] ? io_issue_sqe+0x77d0/0x77d0 [ 2479.559481] ? __fget_files+0x2f8/0x520 [ 2479.560326] ? io_prep_rw+0x7f5/0x1050 [ 2479.561161] io_submit_sqes+0x44ab/0x8610 [ 2479.562063] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2479.563109] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2479.564119] ? find_held_lock+0x2c/0x110 [ 2479.564988] ? io_submit_sqes+0x8610/0x8610 [ 2479.565902] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2479.566909] ? wait_for_completion_io+0x270/0x270 [ 2479.567925] ? rcu_read_lock_any_held+0x75/0xa0 [ 2479.568901] ? vfs_write+0x354/0xb10 [ 2479.569682] ? fput_many+0x2f/0x1a0 [ 2479.570446] ? ksys_write+0x1a9/0x260 [ 2479.571249] ? __ia32_sys_read+0xb0/0xb0 [ 2479.572110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2479.573225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2479.574309] do_syscall_64+0x33/0x40 [ 2479.575086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2479.576162] RIP: 0033:0x7fe1da102b19 [ 2479.576951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2479.580818] RSP: 002b:00007fe1d7678188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2479.582415] RAX: ffffffffffffffda RBX: 00007fe1da215f60 RCX: 00007fe1da102b19 [ 2479.583908] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2479.585412] RBP: 00007fe1d76781d0 R08: 0000000000000000 R09: 0000000000000000 [ 2479.586932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2479.588430] R13: 00007ffd39ab7ddf R14: 00007fe1d7678300 R15: 0000000000022000 03:09:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 03:09:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e) 03:09:27 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a000000, 0x0, 0x0, 0x0) 03:09:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 03:09:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24) 03:09:27 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 03:09:27 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 03:09:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 03:09:44 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:09:44 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c000000, 0x0, 0x0, 0x0) 03:09:44 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 03:09:44 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 03:09:44 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 03:09:44 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 03:09:44 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 03:09:44 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a) [ 2497.152792] FAULT_INJECTION: forcing a failure. [ 2497.152792] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.155546] CPU: 0 PID: 12560 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2497.157029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.158774] Call Trace: [ 2497.159338] dump_stack+0x107/0x167 [ 2497.160106] should_fail.cold+0x5/0xa [ 2497.160913] ? kvmalloc_node+0x119/0x170 [ 2497.161773] should_failslab+0x5/0x20 [ 2497.162576] __kmalloc_node+0x76/0x420 [ 2497.163397] kvmalloc_node+0x119/0x170 [ 2497.164223] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2497.165265] seq_read_iter+0x81c/0x12b0 [ 2497.166107] ? _cond_resched+0x10/0x30 [ 2497.166940] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2497.167965] kernfs_fop_read_iter+0x456/0x5f0 [ 2497.168913] ? rw_verify_area+0x11d/0x350 [ 2497.169790] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2497.170824] io_read+0x2dc/0x11e0 [ 2497.171571] ? kiocb_done+0xc90/0xc90 [ 2497.172373] ? mark_lock+0xf5/0x2df0 [ 2497.173175] ? lock_chain_count+0x20/0x20 [ 2497.174058] ? stack_trace_consume_entry+0x160/0x160 [ 2497.175138] ? lock_acquire+0x197/0x470 [ 2497.175984] ? __lock_acquire+0xbb1/0x5b00 [ 2497.176883] io_issue_sqe+0x2e8a/0x77d0 [ 2497.177740] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2497.178840] ? lock_chain_count+0x20/0x20 [ 2497.179709] ? __is_insn_slot_addr+0x14c/0x290 [ 2497.180678] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2497.181797] ? io_connect+0x610/0x610 [ 2497.182603] ? lock_acquire+0x197/0x470 [ 2497.183440] ? find_held_lock+0x2c/0x110 [ 2497.184306] ? __fget_files+0x2cf/0x520 [ 2497.185146] ? lock_downgrade+0x6d0/0x6d0 [ 2497.186025] __io_queue_sqe+0x90/0x9d0 [ 2497.186852] ? io_issue_sqe+0x77d0/0x77d0 [ 2497.187728] ? __fget_files+0x2f8/0x520 [ 2497.188570] ? io_prep_rw+0x7f5/0x1050 [ 2497.189404] io_submit_sqes+0x44ab/0x8610 [ 2497.190309] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2497.191356] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2497.192369] ? find_held_lock+0x2c/0x110 [ 2497.193236] ? io_submit_sqes+0x8610/0x8610 [ 2497.194144] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2497.195161] ? wait_for_completion_io+0x270/0x270 [ 2497.196173] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.197162] ? vfs_write+0x354/0xb10 [ 2497.197943] ? fput_many+0x2f/0x1a0 [ 2497.198712] ? ksys_write+0x1a9/0x260 [ 2497.199509] ? __ia32_sys_read+0xb0/0xb0 [ 2497.200377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.201485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.202574] do_syscall_64+0x33/0x40 [ 2497.203361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.204429] RIP: 0033:0x7f01ae28cb19 [ 2497.205218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.209089] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2497.210685] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2497.212173] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2497.213668] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.215167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.216657] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:09:44 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 03:09:44 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30) 03:09:44 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 03:09:44 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 03:09:44 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36) 03:09:44 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) 03:09:45 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) 03:09:45 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 03:10:00 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:10:00 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) 03:10:00 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) 03:10:00 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c) 03:10:00 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 03:10:00 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 03:10:00 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) 03:10:00 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 2513.018418] FAULT_INJECTION: forcing a failure. [ 2513.018418] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.019721] CPU: 0 PID: 12625 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2513.020518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.021495] Call Trace: [ 2513.021817] dump_stack+0x107/0x167 [ 2513.022235] should_fail.cold+0x5/0xa [ 2513.022672] ? create_object.isra.0+0x3a/0xa30 [ 2513.023202] should_failslab+0x5/0x20 [ 2513.023644] kmem_cache_alloc+0x5b/0x310 [ 2513.024113] create_object.isra.0+0x3a/0xa30 [ 2513.024612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.025199] __kmalloc_node+0x1ae/0x420 [ 2513.025657] kvmalloc_node+0x119/0x170 [ 2513.026110] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2513.026670] seq_read_iter+0x81c/0x12b0 [ 2513.027122] ? _cond_resched+0x10/0x30 [ 2513.027574] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2513.028126] kernfs_fop_read_iter+0x456/0x5f0 [ 2513.028635] ? rw_verify_area+0x11d/0x350 [ 2513.029105] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2513.029676] io_read+0x2dc/0x11e0 [ 2513.030076] ? kiocb_done+0xc90/0xc90 [ 2513.030507] ? mark_lock+0xf5/0x2df0 [ 2513.030933] ? lock_chain_count+0x20/0x20 [ 2513.031410] ? stack_trace_consume_entry+0x160/0x160 [ 2513.031982] ? lock_acquire+0x197/0x470 [ 2513.032442] ? lock_acquire+0x197/0x470 [ 2513.032895] ? __lock_acquire+0xbb1/0x5b00 [ 2513.033388] io_issue_sqe+0x2e8a/0x77d0 [ 2513.033844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2513.034439] ? lock_chain_count+0x20/0x20 [ 2513.034906] ? __is_insn_slot_addr+0x14c/0x290 [ 2513.035425] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2513.036021] ? io_connect+0x610/0x610 [ 2513.036453] ? lock_acquire+0x197/0x470 [ 2513.036900] ? find_held_lock+0x2c/0x110 [ 2513.037374] ? __fget_files+0x2cf/0x520 [ 2513.037823] ? lock_downgrade+0x6d0/0x6d0 [ 2513.038292] __io_queue_sqe+0x90/0x9d0 [ 2513.038734] ? io_issue_sqe+0x77d0/0x77d0 [ 2513.039201] ? __fget_files+0x2f8/0x520 [ 2513.039652] ? io_prep_rw+0x7f5/0x1050 [ 2513.040097] io_submit_sqes+0x44ab/0x8610 [ 2513.040579] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2513.041141] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2513.041696] ? find_held_lock+0x2c/0x110 [ 2513.042157] ? io_submit_sqes+0x8610/0x8610 [ 2513.042647] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2513.043192] ? wait_for_completion_io+0x270/0x270 [ 2513.043737] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.044264] ? vfs_write+0x354/0xb10 [ 2513.044684] ? fput_many+0x2f/0x1a0 [ 2513.045098] ? ksys_write+0x1a9/0x260 [ 2513.045537] ? __ia32_sys_read+0xb0/0xb0 [ 2513.046001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.046595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.047181] do_syscall_64+0x33/0x40 [ 2513.047602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.048188] RIP: 0033:0x7f01ae28cb19 [ 2513.048611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.050685] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2513.051549] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2513.052352] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2513.053153] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.053966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.054768] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:10:00 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00000000000000, 0x0, 0x0) 03:10:00 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 03:10:00 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) 03:10:00 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200000000000000, 0x0, 0x0) 03:10:00 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 03:10:00 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 03:10:00 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800000000000000, 0x0, 0x0) 03:10:14 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 03:10:14 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 03:10:14 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) 03:10:14 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x100000, 0x0, 0x0, 0x0) 03:10:14 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 03:10:14 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 03:10:14 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600) 03:10:14 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00000000000000, 0x0, 0x0) [ 2527.527674] FAULT_INJECTION: forcing a failure. [ 2527.527674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2527.529179] CPU: 0 PID: 12677 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2527.530021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.531026] Call Trace: [ 2527.531354] dump_stack+0x107/0x167 [ 2527.531798] should_fail.cold+0x5/0xa [ 2527.532278] _copy_to_iter+0x264/0x12d0 [ 2527.532771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2527.533367] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2527.533971] ? __virt_addr_valid+0x170/0x5d0 [ 2527.534508] ? __check_object_size+0x319/0x440 [ 2527.535065] seq_read_iter+0xdcb/0x12b0 [ 2527.535561] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2527.536162] kernfs_fop_read_iter+0x456/0x5f0 [ 2527.536707] ? rw_verify_area+0x11d/0x350 [ 2527.537221] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2527.537830] io_read+0x2dc/0x11e0 [ 2527.538260] ? kiocb_done+0xc90/0xc90 [ 2527.538722] ? mark_lock+0xf5/0x2df0 [ 2527.539181] ? lock_chain_count+0x20/0x20 [ 2527.539691] ? stack_trace_consume_entry+0x160/0x160 [ 2527.540317] ? lock_acquire+0x197/0x470 [ 2527.540805] ? __lock_acquire+0xbb1/0x5b00 [ 2527.541322] io_issue_sqe+0x2e8a/0x77d0 [ 2527.541818] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2527.542457] ? lock_chain_count+0x20/0x20 [ 2527.542961] ? __is_insn_slot_addr+0x14c/0x290 [ 2527.543517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2527.544153] ? io_connect+0x610/0x610 [ 2527.544619] ? lock_acquire+0x197/0x470 [ 2527.545100] ? find_held_lock+0x2c/0x110 [ 2527.545603] ? __fget_files+0x2cf/0x520 [ 2527.546081] ? lock_downgrade+0x6d0/0x6d0 [ 2527.546588] __io_queue_sqe+0x90/0x9d0 [ 2527.547063] ? io_issue_sqe+0x77d0/0x77d0 [ 2527.547562] ? __fget_files+0x2f8/0x520 [ 2527.548045] ? io_prep_rw+0x7f5/0x1050 [ 2527.548521] io_submit_sqes+0x44ab/0x8610 [ 2527.549040] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2527.549647] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2527.550227] ? find_held_lock+0x2c/0x110 [ 2527.550718] ? io_submit_sqes+0x8610/0x8610 [ 2527.551241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2527.551820] ? wait_for_completion_io+0x270/0x270 [ 2527.552404] ? rcu_read_lock_any_held+0x75/0xa0 [ 2527.552961] ? vfs_write+0x354/0xb10 [ 2527.553431] ? fput_many+0x2f/0x1a0 [ 2527.553874] ? ksys_write+0x1a9/0x260 [ 2527.554333] ? __ia32_sys_read+0xb0/0xb0 [ 2527.554824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2527.555453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2527.556073] do_syscall_64+0x33/0x40 [ 2527.556525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2527.557144] RIP: 0033:0x7f01ae28cb19 [ 2527.557601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.559806] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2527.560719] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2527.561582] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2527.562555] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.563390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.564227] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:10:14 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 03:10:15 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 03:10:15 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00) 03:10:15 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 03:10:15 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 03:10:15 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400000000000000, 0x0, 0x0) 03:10:15 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200) 03:10:15 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 03:10:28 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 03:10:28 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3, 0x0, 0x0, 0x0) 03:10:28 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 03:10:28 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 03:10:28 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 03:10:28 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800) 03:10:28 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00000000000000, 0x0, 0x0) 03:10:28 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) [ 2540.846757] FAULT_INJECTION: forcing a failure. [ 2540.846757] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.849307] CPU: 0 PID: 12723 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2540.850780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.852558] Call Trace: [ 2540.853123] dump_stack+0x107/0x167 [ 2540.853910] should_fail.cold+0x5/0xa [ 2540.854715] ? io_setup_async_rw+0x180/0x580 [ 2540.855645] should_failslab+0x5/0x20 [ 2540.856448] __kmalloc+0x72/0x390 [ 2540.857181] io_setup_async_rw+0x180/0x580 [ 2540.858080] ? iov_iter_restore+0x195/0x3a0 [ 2540.858995] io_read+0x775/0x11e0 [ 2540.859743] ? kiocb_done+0xc90/0xc90 [ 2540.860545] ? mark_lock+0xf5/0x2df0 [ 2540.861332] ? lock_chain_count+0x20/0x20 [ 2540.862225] ? stack_trace_consume_entry+0x160/0x160 [ 2540.863301] ? lock_acquire+0x197/0x470 [ 2540.864141] ? __lock_acquire+0xbb1/0x5b00 [ 2540.865043] io_issue_sqe+0x2e8a/0x77d0 [ 2540.865909] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2540.867013] ? lock_chain_count+0x20/0x20 [ 2540.867886] ? __is_insn_slot_addr+0x14c/0x290 [ 2540.868855] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2540.869966] ? io_connect+0x610/0x610 [ 2540.870776] ? lock_acquire+0x197/0x470 [ 2540.871606] ? find_held_lock+0x2c/0x110 [ 2540.872471] ? __fget_files+0x2cf/0x520 [ 2540.873310] ? lock_downgrade+0x6d0/0x6d0 [ 2540.874210] __io_queue_sqe+0x90/0x9d0 [ 2540.875053] ? io_issue_sqe+0x77d0/0x77d0 [ 2540.875929] ? __fget_files+0x2f8/0x520 [ 2540.876769] ? io_prep_rw+0x7f5/0x1050 [ 2540.877597] io_submit_sqes+0x44ab/0x8610 [ 2540.878492] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2540.879541] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2540.880552] ? find_held_lock+0x2c/0x110 [ 2540.881413] ? io_submit_sqes+0x8610/0x8610 [ 2540.882331] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2540.883370] ? wait_for_completion_io+0x270/0x270 [ 2540.884386] ? rcu_read_lock_any_held+0x75/0xa0 [ 2540.885355] ? vfs_write+0x354/0xb10 [ 2540.886142] ? fput_many+0x2f/0x1a0 [ 2540.886906] ? ksys_write+0x1a9/0x260 [ 2540.887704] ? __ia32_sys_read+0xb0/0xb0 03:10:28 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) [ 2540.888565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.889865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.890954] do_syscall_64+0x33/0x40 [ 2540.891733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2540.892809] RIP: 0033:0x7f01ae28cb19 [ 2540.893601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2540.897489] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2540.899105] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2540.900600] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2540.902107] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2540.903598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2540.905092] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:10:28 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00) 03:10:28 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 03:10:28 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x48, 0x0, 0x0) 03:10:28 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 03:10:28 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000000000000, 0x0, 0x0) 03:10:28 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c, 0x0, 0x0) 03:10:28 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400) 03:10:40 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 03:10:40 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 03:10:40 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x68, 0x0, 0x0) 03:10:40 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600000000000000, 0x0, 0x0) 03:10:40 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) 03:10:40 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3000000, 0x0, 0x0, 0x0) 03:10:40 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00) 03:10:41 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) [ 2553.619457] FAULT_INJECTION: forcing a failure. [ 2553.619457] name failslab, interval 1, probability 0, space 0, times 0 [ 2553.621927] CPU: 0 PID: 12782 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2553.623371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.625104] Call Trace: [ 2553.625681] dump_stack+0x107/0x167 [ 2553.626454] should_fail.cold+0x5/0xa [ 2553.627256] ? create_object.isra.0+0x3a/0xa30 [ 2553.628216] should_failslab+0x5/0x20 [ 2553.629014] kmem_cache_alloc+0x5b/0x310 [ 2553.629887] create_object.isra.0+0x3a/0xa30 [ 2553.630808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2553.631889] __kmalloc+0x16e/0x390 [ 2553.632640] io_setup_async_rw+0x180/0x580 [ 2553.633526] ? iov_iter_restore+0x195/0x3a0 [ 2553.634453] io_read+0x775/0x11e0 [ 2553.635200] ? kiocb_done+0xc90/0xc90 [ 2553.636005] ? mark_lock+0xf5/0x2df0 [ 2553.636798] ? lock_chain_count+0x20/0x20 [ 2553.637686] ? mark_held_locks+0x9e/0xe0 [ 2553.638538] ? lock_acquire+0x197/0x470 [ 2553.639382] ? lock_acquire+0x197/0x470 [ 2553.640223] ? __lock_acquire+0xbb1/0x5b00 [ 2553.641118] io_issue_sqe+0x2e8a/0x77d0 [ 2553.641973] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2553.643077] ? lock_chain_count+0x20/0x20 [ 2553.643945] ? __is_insn_slot_addr+0x14c/0x290 [ 2553.644909] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2553.646020] ? io_connect+0x610/0x610 [ 2553.646832] ? lock_acquire+0x197/0x470 [ 2553.647668] ? find_held_lock+0x2c/0x110 [ 2553.648539] ? __fget_files+0x2cf/0x520 [ 2553.649375] ? lock_downgrade+0x6d0/0x6d0 [ 2553.650269] __io_queue_sqe+0x90/0x9d0 [ 2553.651096] ? io_issue_sqe+0x77d0/0x77d0 [ 2553.651966] ? __fget_files+0x2f8/0x520 [ 2553.652819] ? io_prep_rw+0x7f5/0x1050 [ 2553.653653] io_submit_sqes+0x44ab/0x8610 [ 2553.654556] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2553.655604] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2553.656618] ? find_held_lock+0x2c/0x110 [ 2553.657483] ? io_submit_sqes+0x8610/0x8610 [ 2553.658410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2553.659428] ? wait_for_completion_io+0x270/0x270 [ 2553.660444] ? rcu_read_lock_any_held+0x75/0xa0 [ 2553.661422] ? vfs_write+0x354/0xb10 [ 2553.662223] ? fput_many+0x2f/0x1a0 [ 2553.662997] ? ksys_write+0x1a9/0x260 [ 2553.663797] ? __ia32_sys_read+0xb0/0xb0 [ 2553.664660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2553.665774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2553.666862] do_syscall_64+0x33/0x40 [ 2553.667657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2553.668738] RIP: 0033:0x7f01ae28cb19 [ 2553.669518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.673421] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2553.675032] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2553.676545] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2553.678056] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2553.679579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2553.681080] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:10:41 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000) 03:10:41 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c, 0x0, 0x0) 03:10:41 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00000000000000, 0x0, 0x0) 03:10:41 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 03:10:41 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) 03:10:41 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600) 03:10:59 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x74, 0x0, 0x0) 03:10:59 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 03:10:59 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4000000, 0x0, 0x0, 0x0) 03:10:59 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 03:10:59 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 03:10:59 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00) 03:10:59 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6, 0x0, 0x0, 0x0) 03:10:59 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffffffffffff, 0x0, 0x0) [ 2571.850375] FAULT_INJECTION: forcing a failure. [ 2571.850375] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.853392] CPU: 1 PID: 12846 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2571.854896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.856675] Call Trace: [ 2571.857258] dump_stack+0x107/0x167 [ 2571.858062] should_fail.cold+0x5/0xa [ 2571.858880] ? __io_queue_sqe+0x666/0x9d0 [ 2571.859767] should_failslab+0x5/0x20 [ 2571.860587] kmem_cache_alloc_trace+0x55/0x320 [ 2571.861573] ? lock_downgrade+0x6d0/0x6d0 [ 2571.862482] __io_queue_sqe+0x666/0x9d0 [ 2571.863344] ? io_issue_sqe+0x77d0/0x77d0 [ 2571.864235] ? __fget_files+0x2f8/0x520 [ 2571.865103] ? io_prep_rw+0x7f5/0x1050 [ 2571.865951] io_submit_sqes+0x44ab/0x8610 [ 2571.866868] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2571.867927] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2571.868957] ? find_held_lock+0x2c/0x110 [ 2571.869833] ? io_submit_sqes+0x8610/0x8610 [ 2571.870777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2571.871813] ? wait_for_completion_io+0x270/0x270 [ 2571.872848] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.873846] ? vfs_write+0x354/0xb10 [ 2571.874671] ? fput_many+0x2f/0x1a0 [ 2571.875463] ? ksys_write+0x1a9/0x260 [ 2571.876291] ? __ia32_sys_read+0xb0/0xb0 [ 2571.877167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.878294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.879397] do_syscall_64+0x33/0x40 [ 2571.880202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.881291] RIP: 0033:0x7f01ae28cb19 [ 2571.882103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.886001] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2571.887631] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2571.889167] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2571.890701] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.892225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.893737] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:10:59 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a, 0x0, 0x0) 03:10:59 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 03:10:59 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 03:10:59 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c, 0x0, 0x0) 03:10:59 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7, 0x0, 0x0, 0x0) 03:10:59 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 03:10:59 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0) 03:10:59 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 03:10:59 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) 03:10:59 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 03:10:59 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 03:11:12 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 03:11:12 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 03:11:12 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6000000, 0x0, 0x0, 0x0) 03:11:12 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 03:11:12 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x300, 0x0, 0x0) 03:11:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 03:11:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) 03:11:12 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) [ 2585.143916] FAULT_INJECTION: forcing a failure. [ 2585.143916] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.146278] CPU: 0 PID: 12913 Comm: syz-executor.3 Not tainted 5.10.244 #1 03:11:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 2585.147642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.149395] Call Trace: [ 2585.149910] dump_stack+0x107/0x167 [ 2585.150648] should_fail.cold+0x5/0xa [ 2585.151379] ? create_object.isra.0+0x3a/0xa30 03:11:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) [ 2585.152273] should_failslab+0x5/0x20 [ 2585.153047] kmem_cache_alloc+0x5b/0x310 [ 2585.153843] create_object.isra.0+0x3a/0xa30 [ 2585.154708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2585.155710] kmem_cache_alloc_trace+0x151/0x320 [ 2585.156611] ? lock_downgrade+0x6d0/0x6d0 [ 2585.157393] __io_queue_sqe+0x666/0x9d0 [ 2585.158190] ? io_issue_sqe+0x77d0/0x77d0 [ 2585.158994] ? __fget_files+0x2f8/0x520 [ 2585.159787] ? io_prep_rw+0x7f5/0x1050 [ 2585.160553] io_submit_sqes+0x44ab/0x8610 [ 2585.161381] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2585.162357] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2585.163297] ? find_held_lock+0x2c/0x110 [ 2585.164106] ? io_submit_sqes+0x8610/0x8610 [ 2585.164963] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2585.165907] ? wait_for_completion_io+0x270/0x270 [ 2585.166861] ? rcu_read_lock_any_held+0x75/0xa0 [ 2585.167784] ? vfs_write+0x354/0xb10 [ 2585.168516] ? fput_many+0x2f/0x1a0 [ 2585.169228] ? ksys_write+0x1a9/0x260 [ 2585.169984] ? __ia32_sys_read+0xb0/0xb0 [ 2585.170790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2585.171826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2585.172839] do_syscall_64+0x33/0x40 [ 2585.173565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2585.174569] RIP: 0033:0x7f01ae28cb19 [ 2585.175279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.178883] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2585.180369] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2585.181779] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2585.183189] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.184615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.186030] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:11:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) 03:11:12 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) 03:11:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 03:11:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc) 03:11:12 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc, 0x0, 0x0, 0x0) 03:11:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000000) 03:11:25 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 03:11:25 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x10, 0x0, 0x0, 0x0) 03:11:25 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 03:11:25 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 03:11:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12) 03:11:25 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7, 0x0, 0x0) 03:11:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc000000) 03:11:25 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7000000, 0x0, 0x0, 0x0) [ 2598.447902] FAULT_INJECTION: forcing a failure. [ 2598.447902] name failslab, interval 1, probability 0, space 0, times 0 [ 2598.450629] CPU: 0 PID: 12969 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2598.452091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2598.453822] Call Trace: [ 2598.454400] dump_stack+0x107/0x167 [ 2598.455168] should_fail.cold+0x5/0xa [ 2598.455966] ? create_object.isra.0+0x3a/0xa30 [ 2598.456933] should_failslab+0x5/0x20 [ 2598.457736] kmem_cache_alloc+0x5b/0x310 [ 2598.458609] create_object.isra.0+0x3a/0xa30 [ 2598.459541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2598.460604] kmem_cache_alloc_trace+0x151/0x320 [ 2598.461590] ? lock_downgrade+0x6d0/0x6d0 [ 2598.462474] __io_queue_sqe+0x666/0x9d0 [ 2598.463330] ? io_issue_sqe+0x77d0/0x77d0 [ 2598.464196] ? __fget_files+0x2f8/0x520 [ 2598.465037] ? io_prep_rw+0x7f5/0x1050 [ 2598.465858] io_submit_sqes+0x44ab/0x8610 [ 2598.466763] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2598.467809] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2598.468821] ? find_held_lock+0x2c/0x110 [ 2598.469675] ? io_submit_sqes+0x8610/0x8610 [ 2598.470595] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2598.471613] ? wait_for_completion_io+0x270/0x270 [ 2598.472622] ? rcu_read_lock_any_held+0x75/0xa0 [ 2598.473604] ? vfs_write+0x354/0xb10 [ 2598.474397] ? fput_many+0x2f/0x1a0 [ 2598.475173] ? ksys_write+0x1a9/0x260 [ 2598.475972] ? __ia32_sys_read+0xb0/0xb0 [ 2598.476825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2598.477923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2598.479031] do_syscall_64+0x33/0x40 [ 2598.479811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2598.480881] RIP: 0033:0x7f01ae28cb19 [ 2598.481665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2598.485534] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2598.487140] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 03:11:25 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x700, 0x0, 0x0) [ 2598.488643] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2598.490361] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2598.491860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.493364] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:11:25 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18) 03:11:25 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12000000) 03:11:26 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 03:11:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc000000, 0x0, 0x0, 0x0) 03:11:26 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e) 03:11:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18000000) 03:11:26 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 03:11:41 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x12000000, 0x0, 0x0, 0x0) 03:11:41 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) 03:11:41 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 03:11:41 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 03:11:41 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24) 03:11:41 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x12, 0x0, 0x0, 0x0) 03:11:41 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 03:11:41 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e000000) [ 2614.247366] FAULT_INJECTION: forcing a failure. [ 2614.247366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2614.250351] CPU: 1 PID: 13026 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2614.251820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.253572] Call Trace: [ 2614.254134] dump_stack+0x107/0x167 [ 2614.254916] should_fail.cold+0x5/0xa [ 2614.255730] _copy_to_iter+0x264/0x12d0 [ 2614.256588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2614.257612] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2614.258663] ? __virt_addr_valid+0x170/0x5d0 [ 2614.259604] ? __check_object_size+0x319/0x440 [ 2614.260579] seq_read_iter+0xdcb/0x12b0 [ 2614.261442] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2614.262488] kernfs_fop_read_iter+0x456/0x5f0 [ 2614.263438] ? rw_verify_area+0x11d/0x350 [ 2614.264320] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2614.265354] io_read+0x2dc/0x11e0 [ 2614.266095] ? __lock_acquire+0x1657/0x5b00 [ 2614.267017] ? kiocb_done+0xc90/0xc90 [ 2614.267826] ? mark_lock+0xf5/0x2df0 [ 2614.268622] ? lock_chain_count+0x20/0x20 [ 2614.269494] ? __lock_acquire+0x1657/0x5b00 [ 2614.270435] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2614.271553] ? lock_chain_count+0x20/0x20 [ 2614.272440] ? __lock_acquire+0xbb1/0x5b00 [ 2614.273348] io_issue_sqe+0x2e8a/0x77d0 [ 2614.274199] ? find_held_lock+0x2c/0x110 [ 2614.275067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2614.276180] ? io_poll_remove_entries+0x30a/0x540 [ 2614.277198] ? io_connect+0x610/0x610 [ 2614.278000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.279116] ? lock_acquire+0x197/0x470 [ 2614.279958] ? find_held_lock+0x2c/0x110 [ 2614.280823] ? __fget_files+0x2cf/0x520 [ 2614.281666] ? lock_downgrade+0x6d0/0x6d0 [ 2614.282555] __io_queue_sqe+0x90/0x9d0 [ 2614.283385] ? io_issue_sqe+0x77d0/0x77d0 [ 2614.284257] ? __fget_files+0x2f8/0x520 [ 2614.285101] ? io_prep_rw+0x7f5/0x1050 [ 2614.285942] io_submit_sqes+0x44ab/0x8610 [ 2614.286859] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2614.287916] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2614.288933] ? find_held_lock+0x2c/0x110 [ 2614.289791] ? io_submit_sqes+0x8610/0x8610 [ 2614.290722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2614.291745] ? wait_for_completion_io+0x270/0x270 [ 2614.292771] ? rcu_read_lock_any_held+0x75/0xa0 [ 2614.293753] ? vfs_write+0x354/0xb10 [ 2614.294550] ? fput_many+0x2f/0x1a0 [ 2614.295325] ? ksys_write+0x1a9/0x260 [ 2614.296140] ? __ia32_sys_read+0xb0/0xb0 [ 2614.297004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.298112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2614.299217] do_syscall_64+0x33/0x40 [ 2614.300003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2614.301084] RIP: 0033:0x7f01ae28cb19 [ 2614.301871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.305771] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2614.307401] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2614.308910] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2614.310434] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.311951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2614.313465] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:11:41 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 03:11:41 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a) 03:11:41 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 03:11:41 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30) 03:11:42 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 03:11:42 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x18, 0x0, 0x0, 0x0) 03:11:42 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24000000) 03:11:42 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 03:11:57 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e, 0x0, 0x0, 0x0) 03:11:57 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x18000000, 0x0, 0x0, 0x0) 03:11:57 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) 03:11:57 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36) 03:11:57 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 03:11:57 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a000000) 03:11:57 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 03:11:57 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c, 0x0, 0x0, 0x0) [ 2629.755424] FAULT_INJECTION: forcing a failure. [ 2629.755424] name failslab, interval 1, probability 0, space 0, times 0 [ 2629.758380] CPU: 0 PID: 13095 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2629.759953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2629.761818] Call Trace: [ 2629.762420] dump_stack+0x107/0x167 [ 2629.763252] should_fail.cold+0x5/0xa [ 2629.764104] ? io_setup_async_rw+0x180/0x580 [ 2629.765088] should_failslab+0x5/0x20 [ 2629.765944] __kmalloc+0x72/0x390 [ 2629.766735] io_setup_async_rw+0x180/0x580 [ 2629.767685] ? iov_iter_restore+0x195/0x3a0 [ 2629.768653] io_read+0x775/0x11e0 [ 2629.769440] ? __lock_acquire+0x1657/0x5b00 [ 2629.770414] ? kiocb_done+0xc90/0xc90 [ 2629.771272] ? mark_lock+0xf5/0x2df0 [ 2629.772118] ? lock_chain_count+0x20/0x20 [ 2629.773053] ? __lock_acquire+0x1657/0x5b00 [ 2629.774037] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2629.775221] ? lock_chain_count+0x20/0x20 [ 2629.776162] ? __lock_acquire+0xbb1/0x5b00 [ 2629.777115] io_issue_sqe+0x2e8a/0x77d0 [ 2629.778006] ? find_held_lock+0x2c/0x110 [ 2629.778927] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2629.780103] ? io_poll_remove_entries+0x30a/0x540 [ 2629.781183] ? io_connect+0x610/0x610 [ 2629.782037] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.783227] ? lock_acquire+0x197/0x470 [ 2629.784121] ? find_held_lock+0x2c/0x110 [ 2629.785034] ? __fget_files+0x2cf/0x520 [ 2629.785921] ? lock_downgrade+0x6d0/0x6d0 [ 2629.786865] __io_queue_sqe+0x90/0x9d0 [ 2629.787742] ? io_issue_sqe+0x77d0/0x77d0 [ 2629.788666] ? __fget_files+0x2f8/0x520 [ 2629.789566] ? io_prep_rw+0x7f5/0x1050 [ 2629.790443] io_submit_sqes+0x44ab/0x8610 [ 2629.791416] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2629.792535] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2629.793621] ? find_held_lock+0x2c/0x110 [ 2629.794548] ? io_submit_sqes+0x8610/0x8610 [ 2629.795525] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2629.796605] ? wait_for_completion_io+0x270/0x270 [ 2629.797700] ? rcu_read_lock_any_held+0x75/0xa0 [ 2629.798754] ? vfs_write+0x354/0xb10 [ 2629.799595] ? fput_many+0x2f/0x1a0 [ 2629.800419] ? ksys_write+0x1a9/0x260 [ 2629.801281] ? __ia32_sys_read+0xb0/0xb0 [ 2629.802196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2629.803380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2629.804547] do_syscall_64+0x33/0x40 [ 2629.805381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2629.806550] RIP: 0033:0x7f01ae28cb19 [ 2629.807399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2629.811538] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2629.813247] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2629.814853] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2629.816453] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2629.818059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2629.819669] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:11:57 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 03:11:57 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c) 03:11:57 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) 03:11:57 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x68, 0x0, 0x0, 0x0) 03:11:57 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 03:11:57 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30000000) 03:12:12 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x24, 0x0, 0x0, 0x0) 03:12:12 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 03:12:12 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 03:12:12 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c, 0x0, 0x0, 0x0) 03:12:12 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x0, 0x0, 0x0) 03:12:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5) 03:12:12 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 03:12:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36000000) [ 2645.451945] FAULT_INJECTION: forcing a failure. [ 2645.451945] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.455351] CPU: 1 PID: 13140 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2645.457188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2645.459335] Call Trace: [ 2645.460023] dump_stack+0x107/0x167 [ 2645.460951] should_fail.cold+0x5/0xa [ 2645.461944] ? create_object.isra.0+0x3a/0xa30 [ 2645.463066] should_failslab+0x5/0x20 [ 2645.464090] kmem_cache_alloc+0x5b/0x310 [ 2645.465118] create_object.isra.0+0x3a/0xa30 [ 2645.466257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2645.467620] __kmalloc+0x16e/0x390 [ 2645.468556] io_setup_async_rw+0x180/0x580 [ 2645.469658] ? iov_iter_restore+0x195/0x3a0 [ 2645.470738] io_read+0x775/0x11e0 [ 2645.471712] ? __lock_acquire+0x1657/0x5b00 [ 2645.472870] ? kiocb_done+0xc90/0xc90 [ 2645.473838] ? mark_lock+0xf5/0x2df0 [ 2645.474740] ? lock_chain_count+0x20/0x20 [ 2645.475814] ? __lock_acquire+0x1657/0x5b00 [ 2645.476912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2645.478233] ? lock_chain_count+0x20/0x20 [ 2645.479324] ? __lock_acquire+0xbb1/0x5b00 [ 2645.480493] io_issue_sqe+0x2e8a/0x77d0 [ 2645.481516] ? find_held_lock+0x2c/0x110 [ 2645.482599] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2645.483975] ? io_poll_remove_entries+0x30a/0x540 [ 2645.485226] ? io_connect+0x610/0x610 [ 2645.486155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2645.487533] ? lock_acquire+0x197/0x470 [ 2645.488651] ? find_held_lock+0x2c/0x110 [ 2645.489662] ? __fget_files+0x2cf/0x520 [ 2645.490604] ? lock_downgrade+0x6d0/0x6d0 [ 2645.491687] __io_queue_sqe+0x90/0x9d0 [ 2645.492744] ? io_issue_sqe+0x77d0/0x77d0 [ 2645.493763] ? __fget_files+0x2f8/0x520 [ 2645.494756] ? io_prep_rw+0x7f5/0x1050 [ 2645.495775] io_submit_sqes+0x44ab/0x8610 [ 2645.496960] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2645.498262] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2645.499427] ? find_held_lock+0x2c/0x110 [ 2645.500415] ? io_submit_sqes+0x8610/0x8610 [ 2645.501566] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2645.502822] ? wait_for_completion_io+0x270/0x270 [ 2645.504057] ? rcu_read_lock_any_held+0x75/0xa0 [ 2645.505068] ? vfs_write+0x354/0xb10 [ 2645.506101] ? fput_many+0x2f/0x1a0 [ 2645.507034] ? ksys_write+0x1a9/0x260 [ 2645.507832] ? __ia32_sys_read+0xb0/0xb0 [ 2645.508810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2645.510036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2645.511271] do_syscall_64+0x33/0x40 [ 2645.512210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2645.513285] RIP: 0033:0x7f01ae28cb19 [ 2645.514066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.517921] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2645.519524] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2645.521012] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2645.522504] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.523997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2645.525868] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:12:13 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) 03:12:13 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c000000) 03:12:13 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600) 03:12:13 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 03:12:13 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 03:12:13 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 03:12:13 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00) 03:12:13 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a, 0x0, 0x0, 0x0) 03:12:13 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 03:12:13 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffff) 03:12:26 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) [ 2659.534969] FAULT_INJECTION: forcing a failure. [ 2659.534969] name failslab, interval 1, probability 0, space 0, times 0 [ 2659.538287] CPU: 0 PID: 13203 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2659.539765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2659.541509] Call Trace: [ 2659.542068] dump_stack+0x107/0x167 [ 2659.542832] should_fail.cold+0x5/0xa [ 2659.543653] ? __io_queue_sqe+0x666/0x9d0 [ 2659.544523] should_failslab+0x5/0x20 [ 2659.545325] kmem_cache_alloc_trace+0x55/0x320 [ 2659.546288] ? lock_downgrade+0x6d0/0x6d0 [ 2659.547186] __io_queue_sqe+0x666/0x9d0 [ 2659.548029] ? io_issue_sqe+0x77d0/0x77d0 [ 2659.548898] ? __fget_files+0x2f8/0x520 [ 2659.549741] ? io_prep_rw+0x7f5/0x1050 [ 2659.550563] io_submit_sqes+0x44ab/0x8610 [ 2659.551476] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2659.552521] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2659.553553] ? io_submit_sqes+0x8610/0x8610 [ 2659.554465] ? recalibrate_cpu_khz+0x10/0x10 [ 2659.555405] ? ktime_get+0x158/0x1f0 [ 2659.556187] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2659.557098] ? clockevents_program_event+0x131/0x360 [ 2659.558162] ? tick_program_event+0xa8/0x140 [ 2659.559094] ? hrtimer_interrupt+0x771/0x9b0 [ 2659.560026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2659.561127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2659.562206] do_syscall_64+0x33/0x40 [ 2659.563004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2659.564075] RIP: 0033:0x7f01ae28cb19 [ 2659.564854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2659.568718] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2659.570317] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2659.571818] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2659.573316] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2659.574809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2659.576315] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:12:26 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 03:12:26 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200) 03:12:26 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x74, 0x0, 0x0, 0x0) 03:12:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x24000000, 0x0, 0x0, 0x0) 03:12:26 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4800, 0x0, 0x0) 03:12:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) 03:12:26 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x30, 0x0, 0x0, 0x0) 03:12:27 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c00, 0x0, 0x0) 03:12:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800) 03:12:27 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 03:12:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffdef) 03:12:27 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6800, 0x0, 0x0) 03:12:27 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00) 03:12:27 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) 03:12:27 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) 03:12:42 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x48, 0x0, 0x0) 03:12:42 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 03:12:42 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c00, 0x0, 0x0) 03:12:42 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 03:12:42 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x36, 0x0, 0x0, 0x0) 03:12:42 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x0, 0x0, 0x0) 03:12:42 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a, 0x0, 0x0, 0x0) 03:12:42 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000) [ 2674.811681] FAULT_INJECTION: forcing a failure. [ 2674.811681] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.814466] CPU: 0 PID: 13273 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2674.815968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2674.817747] Call Trace: [ 2674.818318] dump_stack+0x107/0x167 [ 2674.819111] should_fail.cold+0x5/0xa [ 2674.819927] ? io_poll_remove_entries+0x30a/0x540 [ 2674.820966] ? create_object.isra.0+0x3a/0xa30 [ 2674.821953] should_failslab+0x5/0x20 [ 2674.822771] kmem_cache_alloc+0x5b/0x310 [ 2674.823656] create_object.isra.0+0x3a/0xa30 [ 2674.824601] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2674.825698] kmem_cache_alloc_trace+0x151/0x320 [ 2674.826695] ? lock_downgrade+0x6d0/0x6d0 [ 2674.827599] __io_queue_sqe+0x666/0x9d0 [ 2674.828460] ? io_issue_sqe+0x77d0/0x77d0 [ 2674.829350] ? __fget_files+0x2f8/0x520 [ 2674.830208] ? io_prep_rw+0x7f5/0x1050 [ 2674.831060] io_submit_sqes+0x44ab/0x8610 [ 2674.831976] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2674.833045] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2674.834085] ? find_held_lock+0x2c/0x110 [ 2674.834963] ? io_submit_sqes+0x8610/0x8610 [ 2674.835900] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2674.836928] ? wait_for_completion_io+0x270/0x270 [ 2674.837954] ? rcu_read_lock_any_held+0x75/0xa0 [ 2674.838940] ? vfs_write+0x354/0xb10 [ 2674.839739] ? fput_many+0x2f/0x1a0 [ 2674.840514] ? ksys_write+0x1a9/0x260 [ 2674.841325] ? __ia32_sys_read+0xb0/0xb0 [ 2674.842195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2674.843319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2674.844420] do_syscall_64+0x33/0x40 [ 2674.845211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2674.846299] RIP: 0033:0x7f01ae28cb19 [ 2674.847102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2674.851022] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2674.852656] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2674.854174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2674.855698] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 03:12:42 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7400, 0x0, 0x0) 03:12:42 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) [ 2674.857204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2674.858914] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:12:42 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x30000000, 0x0, 0x0, 0x0) 03:12:42 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400) 03:12:55 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 03:12:55 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00) 03:12:55 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x36000000, 0x0, 0x0, 0x0) 03:12:55 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000000000000) 03:12:55 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a00, 0x0, 0x0) 03:12:55 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c, 0x0, 0x0, 0x0) 03:12:55 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c, 0x0, 0x0, 0x0) 03:12:55 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c, 0x0, 0x0) [ 2688.267739] FAULT_INJECTION: forcing a failure. [ 2688.267739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2688.270716] CPU: 0 PID: 13317 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2688.272295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2688.274171] Call Trace: [ 2688.274770] dump_stack+0x107/0x167 [ 2688.275606] should_fail.cold+0x5/0xa [ 2688.276473] _copy_from_user+0x2e/0x1b0 [ 2688.277375] iovec_from_user+0x141/0x400 [ 2688.278296] __import_iovec+0x67/0x590 [ 2688.279173] ? kfree+0xd7/0x340 [ 2688.279940] io_import_iovec+0x581/0x1120 [ 2688.280872] ? io_link_timeout_fn+0x20/0x380 [ 2688.281871] ? io_complete_rw+0x230/0x230 [ 2688.282804] ? io_clean_op+0x30c/0x870 [ 2688.283697] ? kiocb_done+0x16b/0xc90 [ 2688.284566] io_read+0xe14/0x11e0 [ 2688.285358] ? __lock_acquire+0x1657/0x5b00 [ 2688.286329] ? kiocb_done+0xc90/0xc90 [ 2688.287187] ? mark_lock+0xf5/0x2df0 [ 2688.288027] ? lock_chain_count+0x20/0x20 [ 2688.288952] ? __lock_acquire+0x1657/0x5b00 [ 2688.289926] ? mark_lock+0xf5/0x2df0 [ 2688.290764] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2688.291945] ? lock_chain_count+0x20/0x20 [ 2688.292880] ? __lock_acquire+0xbb1/0x5b00 [ 2688.293831] io_issue_sqe+0x2e8a/0x77d0 [ 2688.294723] ? find_held_lock+0x2c/0x110 [ 2688.295642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2688.296815] ? io_poll_remove_entries+0x30a/0x540 [ 2688.297892] ? io_connect+0x610/0x610 [ 2688.298741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2688.299922] ? lock_acquire+0x197/0x470 [ 2688.300808] ? find_held_lock+0x2c/0x110 [ 2688.301721] ? __fget_files+0x2cf/0x520 [ 2688.302610] ? lock_downgrade+0x6d0/0x6d0 [ 2688.303548] __io_queue_sqe+0x90/0x9d0 [ 2688.304428] ? io_issue_sqe+0x77d0/0x77d0 [ 2688.305349] ? __fget_files+0x2f8/0x520 [ 2688.306242] ? io_prep_rw+0x7f5/0x1050 [ 2688.307111] io_submit_sqes+0x44ab/0x8610 [ 2688.308074] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2688.309179] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2688.310250] ? find_held_lock+0x2c/0x110 [ 2688.311156] ? io_submit_sqes+0x8610/0x8610 [ 2688.312131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2688.313201] ? wait_for_completion_io+0x270/0x270 [ 2688.314270] ? rcu_read_lock_any_held+0x75/0xa0 [ 2688.315311] ? vfs_write+0x354/0xb10 [ 2688.316135] ? fput_many+0x2f/0x1a0 [ 2688.316942] ? ksys_write+0x1a9/0x260 [ 2688.317787] ? __ia32_sys_read+0xb0/0xb0 [ 2688.318689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2688.319859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2688.321006] do_syscall_64+0x33/0x40 [ 2688.321831] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2688.322966] RIP: 0033:0x7f01ae28cb19 [ 2688.323799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2688.327879] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2688.329555] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2688.331125] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2688.332703] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2688.334274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2688.335852] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:12:55 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c00, 0x0, 0x0) 03:13:08 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 03:13:08 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) 03:13:08 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 03:13:08 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x0, 0x0, 0x0) 03:13:08 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x68, 0x0, 0x0) 03:13:08 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000) 03:13:08 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 03:13:08 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00000000000000) 03:13:08 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c, 0x0, 0x0) [ 2700.847761] FAULT_INJECTION: forcing a failure. [ 2700.847761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2700.850531] CPU: 0 PID: 13356 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2700.852046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2700.853844] Call Trace: [ 2700.854420] dump_stack+0x107/0x167 [ 2700.855219] should_fail.cold+0x5/0xa [ 2700.856062] _copy_to_iter+0x264/0x12d0 [ 2700.856940] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2700.857993] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2700.859063] ? __virt_addr_valid+0x170/0x5d0 03:13:08 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x74, 0x0, 0x0) [ 2700.860029] ? __check_object_size+0x319/0x440 [ 2700.861191] seq_read_iter+0xdcb/0x12b0 [ 2700.862070] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2700.863131] kernfs_fop_read_iter+0x456/0x5f0 [ 2700.864109] ? rw_verify_area+0x11d/0x350 [ 2700.865005] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2700.866063] io_read+0x2dc/0x11e0 [ 2700.866821] ? __lock_acquire+0x1657/0x5b00 [ 2700.867767] ? kiocb_done+0xc90/0xc90 [ 2700.868588] ? mark_lock+0xf5/0x2df0 [ 2700.869398] ? lock_chain_count+0x20/0x20 [ 2700.870292] ? __lock_acquire+0x1657/0x5b00 [ 2700.871242] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2700.872384] ? lock_chain_count+0x20/0x20 [ 2700.873288] ? __lock_acquire+0xbb1/0x5b00 [ 2700.874209] io_issue_sqe+0x2e8a/0x77d0 [ 2700.875076] ? find_held_lock+0x2c/0x110 [ 2700.875968] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2700.877102] ? io_poll_remove_entries+0x30a/0x540 03:13:08 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) [ 2700.878150] ? io_connect+0x610/0x610 [ 2700.879018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2700.880173] ? lock_acquire+0x197/0x470 [ 2700.881033] ? find_held_lock+0x2c/0x110 [ 2700.881922] ? __fget_files+0x2cf/0x520 [ 2700.882784] ? lock_downgrade+0x6d0/0x6d0 [ 2700.883700] __io_queue_sqe+0x90/0x9d0 [ 2700.884560] ? io_issue_sqe+0x77d0/0x77d0 [ 2700.885454] ? __fget_files+0x2f8/0x520 [ 2700.886324] ? io_prep_rw+0x7f5/0x1050 [ 2700.887173] io_submit_sqes+0x44ab/0x8610 [ 2700.888110] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2700.889195] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2700.890243] ? find_held_lock+0x2c/0x110 [ 2700.891128] ? io_submit_sqes+0x8610/0x8610 [ 2700.892075] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2700.893125] ? wait_for_completion_io+0x270/0x270 [ 2700.894174] ? rcu_read_lock_any_held+0x75/0xa0 [ 2700.895179] ? vfs_write+0x354/0xb10 [ 2700.895992] ? fput_many+0x2f/0x1a0 [ 2700.896789] ? ksys_write+0x1a9/0x260 [ 2700.897616] ? __ia32_sys_read+0xb0/0xb0 [ 2700.898501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2700.899645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2700.900767] do_syscall_64+0x33/0x40 [ 2700.901576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2700.902686] RIP: 0033:0x7f01ae28cb19 [ 2700.903501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2700.907502] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2700.909153] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2700.910705] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2700.912262] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2700.913810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2700.915371] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:13:08 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 03:13:08 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x300, 0x0, 0x0, 0x0) 03:13:08 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600) 03:13:08 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200000000000000) 03:13:08 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a, 0x0, 0x0) 03:13:21 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) 03:13:21 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x48000000, 0x0, 0x0, 0x0) 03:13:21 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c, 0x0, 0x0, 0x0) 03:13:21 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800000000000000) 03:13:21 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00) 03:13:21 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 03:13:21 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c, 0x0, 0x0) 03:13:21 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) [ 2714.392662] FAULT_INJECTION: forcing a failure. [ 2714.392662] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.395965] CPU: 1 PID: 13413 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2714.397783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.399973] Call Trace: [ 2714.400666] dump_stack+0x107/0x167 [ 2714.401623] should_fail.cold+0x5/0xa [ 2714.402604] ? io_setup_async_rw+0x180/0x580 [ 2714.403751] should_failslab+0x5/0x20 [ 2714.404741] __kmalloc+0x72/0x390 [ 2714.405657] io_setup_async_rw+0x180/0x580 [ 2714.406755] ? iov_iter_restore+0x195/0x3a0 [ 2714.407899] io_read+0x775/0x11e0 [ 2714.408818] ? __lock_acquire+0x1657/0x5b00 [ 2714.409960] ? kiocb_done+0xc90/0xc90 [ 2714.410753] ? mark_lock+0xf5/0x2df0 [ 2714.411755] ? lock_chain_count+0x20/0x20 [ 2714.412835] ? __lock_acquire+0x1657/0x5b00 [ 2714.413983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2714.415361] ? lock_chain_count+0x20/0x20 [ 2714.416310] ? __lock_acquire+0xbb1/0x5b00 [ 2714.417247] io_issue_sqe+0x2e8a/0x77d0 [ 2714.418132] ? find_held_lock+0x2c/0x110 [ 2714.419027] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2714.420206] ? io_poll_remove_entries+0x30a/0x540 [ 2714.421267] ? io_connect+0x610/0x610 [ 2714.422104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2714.423274] ? lock_acquire+0x197/0x470 [ 2714.424165] ? find_held_lock+0x2c/0x110 [ 2714.425069] ? __fget_files+0x2cf/0x520 [ 2714.425942] ? lock_downgrade+0x6d0/0x6d0 [ 2714.426865] __io_queue_sqe+0x90/0x9d0 [ 2714.427755] ? io_issue_sqe+0x77d0/0x77d0 [ 2714.428665] ? __fget_files+0x2f8/0x520 [ 2714.429542] ? io_prep_rw+0x7f5/0x1050 [ 2714.430396] io_submit_sqes+0x44ab/0x8610 [ 2714.431329] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2714.432435] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2714.433494] ? find_held_lock+0x2c/0x110 [ 2714.434383] ? io_submit_sqes+0x8610/0x8610 [ 2714.435336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2714.436405] ? wait_for_completion_io+0x270/0x270 [ 2714.437463] ? rcu_read_lock_any_held+0x75/0xa0 [ 2714.438490] ? vfs_write+0x354/0xb10 [ 2714.439315] ? fput_many+0x2f/0x1a0 [ 2714.440171] ? ksys_write+0x1a9/0x260 [ 2714.441001] ? __ia32_sys_read+0xb0/0xb0 [ 2714.441896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2714.443034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2714.444179] do_syscall_64+0x33/0x40 [ 2714.444992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2714.446108] RIP: 0033:0x7f01ae28cb19 [ 2714.446920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.450928] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2714.452602] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2714.454165] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2714.455729] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.457280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2714.458838] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:13:21 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 03:13:21 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000, 0x0, 0x0) 03:13:21 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00000000000000) 03:13:21 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffd) 03:13:22 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000, 0x0, 0x0) 03:13:22 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x300, 0x0, 0x0) 03:13:22 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 03:13:37 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ff) 03:13:37 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 03:13:37 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) 03:13:37 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400000000000000) 03:13:37 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c000000, 0x0, 0x0, 0x0) 03:13:37 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 03:13:37 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 03:13:37 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x68, 0x0, 0x0, 0x0) [ 2730.601648] FAULT_INJECTION: forcing a failure. [ 2730.601648] name failslab, interval 1, probability 0, space 0, times 0 [ 2730.604549] CPU: 0 PID: 13466 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2730.606058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2730.607888] Call Trace: [ 2730.608465] dump_stack+0x107/0x167 [ 2730.609267] should_fail.cold+0x5/0xa [ 2730.610105] ? create_object.isra.0+0x3a/0xa30 [ 2730.611118] should_failslab+0x5/0x20 [ 2730.611981] kmem_cache_alloc+0x5b/0x310 [ 2730.612875] create_object.isra.0+0x3a/0xa30 [ 2730.613837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2730.614948] __kmalloc+0x16e/0x390 [ 2730.615764] io_setup_async_rw+0x180/0x580 [ 2730.616692] ? iov_iter_restore+0x195/0x3a0 [ 2730.617639] io_read+0x775/0x11e0 [ 2730.618407] ? __lock_acquire+0x1657/0x5b00 [ 2730.619355] ? kiocb_done+0xc90/0xc90 [ 2730.620215] ? mark_lock+0xf5/0x2df0 [ 2730.621028] ? lock_chain_count+0x20/0x20 [ 2730.621922] ? __lock_acquire+0x1657/0x5b00 [ 2730.622881] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2730.624057] ? lock_chain_count+0x20/0x20 [ 2730.624958] ? __lock_acquire+0xbb1/0x5b00 [ 2730.625873] io_issue_sqe+0x2e8a/0x77d0 [ 2730.626732] ? find_held_lock+0x2c/0x110 [ 2730.627607] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2730.628767] ? io_poll_remove_entries+0x30a/0x540 [ 2730.629814] ? io_connect+0x610/0x610 [ 2730.630658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.631832] ? lock_acquire+0x197/0x470 [ 2730.632683] ? find_held_lock+0x2c/0x110 [ 2730.633562] ? __fget_files+0x2cf/0x520 [ 2730.634409] ? lock_downgrade+0x6d0/0x6d0 [ 2730.635315] __io_queue_sqe+0x90/0x9d0 [ 2730.636199] ? io_issue_sqe+0x77d0/0x77d0 [ 2730.637092] ? __fget_files+0x2f8/0x520 [ 2730.637950] ? io_prep_rw+0x7f5/0x1050 [ 2730.638795] io_submit_sqes+0x44ab/0x8610 [ 2730.639748] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2730.640829] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2730.641871] ? find_held_lock+0x2c/0x110 [ 2730.642745] ? io_submit_sqes+0x8610/0x8610 [ 2730.643713] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2730.644750] ? wait_for_completion_io+0x270/0x270 [ 2730.645792] ? rcu_read_lock_any_held+0x75/0xa0 [ 2730.646789] ? vfs_write+0x354/0xb10 [ 2730.647591] ? fput_many+0x2f/0x1a0 [ 2730.648400] ? ksys_write+0x1a9/0x260 [ 2730.649215] ? __ia32_sys_read+0xb0/0xb0 [ 2730.650082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2730.651209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2730.652327] do_syscall_64+0x33/0x40 [ 2730.653134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2730.654229] RIP: 0033:0x7f01ae28cb19 [ 2730.655024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2730.658959] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2730.660588] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2730.662088] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2730.663609] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2730.665162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2730.666675] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:13:38 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 03:13:38 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00000000000000) 03:13:38 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) 03:13:38 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfdef) 03:13:38 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x700, 0x0, 0x0) 03:13:38 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x68000000, 0x0, 0x0, 0x0) 03:13:38 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 03:13:38 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c, 0x0, 0x0, 0x0) 03:13:38 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000000000000) 03:13:51 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c000000, 0x0, 0x0, 0x0) 03:13:51 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 03:13:51 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfff5) 03:13:51 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x700, 0x0, 0x0, 0x0) 03:13:51 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000, 0x0, 0x0) 03:13:51 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600000000000000) 03:13:51 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x74, 0x0, 0x0, 0x0) 03:13:51 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 2744.173903] FAULT_INJECTION: forcing a failure. [ 2744.173903] name failslab, interval 1, probability 0, space 0, times 0 [ 2744.176467] CPU: 1 PID: 13527 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2744.177932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2744.179657] Call Trace: [ 2744.180201] dump_stack+0x107/0x167 [ 2744.180982] should_fail.cold+0x5/0xa [ 2744.181764] ? __io_queue_sqe+0x666/0x9d0 [ 2744.182636] should_failslab+0x5/0x20 [ 2744.183447] kmem_cache_alloc_trace+0x55/0x320 [ 2744.184417] ? lock_downgrade+0x6d0/0x6d0 [ 2744.185264] __io_queue_sqe+0x666/0x9d0 [ 2744.186263] ? io_issue_sqe+0x77d0/0x77d0 [ 2744.187392] ? __fget_files+0x2f8/0x520 [ 2744.188479] ? io_prep_rw+0x7f5/0x1050 [ 2744.189503] io_submit_sqes+0x44ab/0x8610 [ 2744.190505] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2744.191526] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2744.192569] ? find_held_lock+0x2c/0x110 [ 2744.193496] ? io_submit_sqes+0x8610/0x8610 [ 2744.194412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2744.195426] ? wait_for_completion_io+0x270/0x270 [ 2744.196443] ? rcu_read_lock_any_held+0x75/0xa0 [ 2744.197395] ? vfs_write+0x354/0xb10 [ 2744.198170] ? fput_many+0x2f/0x1a0 [ 2744.198913] ? ksys_write+0x1a9/0x260 [ 2744.199695] ? __ia32_sys_read+0xb0/0xb0 [ 2744.200550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2744.201640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2744.202666] do_syscall_64+0x33/0x40 [ 2744.203458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2744.204542] RIP: 0033:0x7f01ae28cb19 [ 2744.205325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2744.209225] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2744.210839] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2744.212349] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2744.213855] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2744.215357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2744.216807] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:13:51 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000, 0x0, 0x0) 03:13:51 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00000000000000) 03:13:51 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 03:13:51 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 03:13:51 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) 03:13:51 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffffffffffff) 03:14:06 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000000) 03:14:06 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 03:14:06 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 03:14:06 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a, 0x0, 0x0, 0x0) 03:14:06 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) 03:14:06 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffffffffffff) 03:14:06 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x74000000, 0x0, 0x0, 0x0) 03:14:06 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) [ 2759.055997] FAULT_INJECTION: forcing a failure. [ 2759.055997] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.058927] CPU: 0 PID: 13564 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2759.060636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.062672] Call Trace: [ 2759.063325] dump_stack+0x107/0x167 [ 2759.064236] should_fail.cold+0x5/0xa [ 2759.065173] ? io_poll_remove_entries+0x30a/0x540 [ 2759.066357] ? create_object.isra.0+0x3a/0xa30 [ 2759.067467] should_failslab+0x5/0x20 [ 2759.068382] kmem_cache_alloc+0x5b/0x310 [ 2759.069387] create_object.isra.0+0x3a/0xa30 [ 2759.070430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2759.071681] kmem_cache_alloc_trace+0x151/0x320 [ 2759.072788] ? lock_downgrade+0x6d0/0x6d0 [ 2759.073807] __io_queue_sqe+0x666/0x9d0 [ 2759.074756] ? io_issue_sqe+0x77d0/0x77d0 [ 2759.075768] ? __fget_files+0x2f8/0x520 [ 2759.076739] ? io_prep_rw+0x7f5/0x1050 [ 2759.077676] io_submit_sqes+0x44ab/0x8610 [ 2759.078683] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2759.079906] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2759.081043] ? find_held_lock+0x2c/0x110 [ 2759.082036] ? io_submit_sqes+0x8610/0x8610 [ 2759.083049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2759.084238] ? wait_for_completion_io+0x270/0x270 [ 2759.085366] ? rcu_read_lock_any_held+0x75/0xa0 [ 2759.086492] ? vfs_write+0x354/0xb10 [ 2759.087360] ? fput_many+0x2f/0x1a0 [ 2759.088259] ? ksys_write+0x1a9/0x260 [ 2759.089149] ? __ia32_sys_read+0xb0/0xb0 [ 2759.090124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.091349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.092592] do_syscall_64+0x33/0x40 [ 2759.093473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2759.094689] RIP: 0033:0x7f01ae28cb19 [ 2759.095556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.099957] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2759.101756] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2759.103411] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2759.105092] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2759.106778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2759.108477] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:14:06 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 03:14:06 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc000000) 03:14:06 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7000000, 0x0, 0x0) 03:14:06 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffdef) 03:14:06 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x12000000) 03:14:06 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 03:14:06 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) 03:14:06 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffff5) 03:14:20 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2400, 0x0, 0x0) 03:14:20 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 03:14:20 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 03:14:20 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a000000, 0x0, 0x0, 0x0) 03:14:20 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 03:14:20 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c, 0x0, 0x0, 0x0) 03:14:20 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) 03:14:20 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x18000000) [ 2772.820438] FAULT_INJECTION: forcing a failure. [ 2772.820438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2772.823335] CPU: 0 PID: 13627 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2772.824807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.826546] Call Trace: [ 2772.827103] dump_stack+0x107/0x167 [ 2772.827871] should_fail.cold+0x5/0xa [ 2772.828686] _copy_from_user+0x2e/0x1b0 [ 2772.829520] iovec_from_user+0x141/0x400 [ 2772.830383] __import_iovec+0x67/0x590 [ 2772.831198] ? kfree+0xd7/0x340 [ 2772.831902] io_import_iovec+0x581/0x1120 [ 2772.832788] ? io_link_timeout_fn+0x20/0x380 [ 2772.833725] ? io_complete_rw+0x230/0x230 [ 2772.834602] ? io_clean_op+0x30c/0x870 [ 2772.835422] ? kiocb_done+0x16b/0xc90 [ 2772.836242] io_read+0xe14/0x11e0 [ 2772.836979] ? __lock_acquire+0x1657/0x5b00 [ 2772.837902] ? kiocb_done+0xc90/0xc90 [ 2772.838699] ? mark_lock+0xf5/0x2df0 [ 2772.839489] ? lock_chain_count+0x20/0x20 [ 2772.840370] ? __lock_acquire+0x1657/0x5b00 [ 2772.841284] ? mark_lock+0xf5/0x2df0 [ 2772.842071] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.843170] ? lock_chain_count+0x20/0x20 [ 2772.844045] ? __lock_acquire+0xbb1/0x5b00 [ 2772.844941] io_issue_sqe+0x2e8a/0x77d0 [ 2772.845787] ? find_held_lock+0x2c/0x110 [ 2772.846644] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2772.847750] ? io_poll_remove_entries+0x30a/0x540 [ 2772.848774] ? io_connect+0x610/0x610 [ 2772.849568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.850675] ? lock_acquire+0x197/0x470 [ 2772.851503] ? find_held_lock+0x2c/0x110 [ 2772.852371] ? __fget_files+0x2cf/0x520 [ 2772.853208] ? lock_downgrade+0x6d0/0x6d0 [ 2772.854087] __io_queue_sqe+0x90/0x9d0 [ 2772.854909] ? io_issue_sqe+0x77d0/0x77d0 [ 2772.855780] ? __fget_files+0x2f8/0x520 [ 2772.856622] ? io_prep_rw+0x7f5/0x1050 [ 2772.857453] io_submit_sqes+0x44ab/0x8610 [ 2772.858348] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2772.859396] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2772.860420] ? find_held_lock+0x2c/0x110 [ 2772.861277] ? io_submit_sqes+0x8610/0x8610 [ 2772.862192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2772.863207] ? wait_for_completion_io+0x270/0x270 [ 2772.864231] ? rcu_read_lock_any_held+0x75/0xa0 [ 2772.865215] ? vfs_write+0x354/0xb10 [ 2772.866003] ? fput_many+0x2f/0x1a0 [ 2772.866767] ? ksys_write+0x1a9/0x260 [ 2772.867562] ? __ia32_sys_read+0xb0/0xb0 [ 2772.868430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.869530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.870616] do_syscall_64+0x33/0x40 [ 2772.871400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.872491] RIP: 0033:0x7f01ae28cb19 [ 2772.873271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.877143] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2772.878740] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2772.880245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2772.881741] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2772.883229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2772.884732] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:14:20 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e000000) 03:14:20 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 03:14:20 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a00, 0x0, 0x0) 03:14:20 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 03:14:20 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c000000, 0x0, 0x0, 0x0) 03:14:20 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 03:14:20 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000, 0x0, 0x0) 03:14:20 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 03:14:20 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5, 0x0, 0x0, 0x0) 03:14:35 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x300, 0x0, 0x0, 0x0) 03:14:35 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 03:14:35 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 03:14:35 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x24000000) 03:14:35 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000480), 0x4) r5 = socket$inet6(0xa, 0x4, 0x0) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) signalfd4(r6, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000006240)='memory.pressure\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f0000000480), 0x4) sendmmsg$unix(r3, &(0x7f0000006340)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)="a61d91ed9d28ff9a36610bec0ac4cd8fdabe4508f3bfbb020d8d5ba9f9c9be91353255ddf7488644d1a07374c0efd8cdfeef4c805aa4b9a64000cfa8d79875a3545824c0798cbf108e1434f74f6c2227e2", 0x51}, {&(0x7f00000004c0)="f3bc8e0050a69810dfad695a9b5290c4168582db7b00e78014ee968d9e2e086372ded3983d14f505fd19d682b914fe07fba900a9d629356cc28f13b757d9130827a61f1e899fe78e05794987454d57287f94154a85211bf52a8444bcfc83bbc5c386bb5c5cc80c946bfe6ae643168eeb807c9f41b0d3861190bfaf9e47bb4bdba2f4bc290f9415ef6eb8", 0x8a}, {&(0x7f00000003c0)="7f3f72e3aaf2dbcdf702aa5767ce8bdf042ab013fe96258c6dc3ea7ae0414e26265cb6782940164f2d47a3ca4529ef", 0x2f}, {&(0x7f0000000440)="e574039a5a81757a2b1c38c483779b45f8a7295b3bf80517f4b14c2895455c1d82fcadb1b5b8846ede3e4e11ab", 0x2d}, {&(0x7f0000000580)="282a4530c00c8601912c48c51d377d7f129208a1dd5ead9e46f8b1881d3355d89f04aa71924c0220c69cef", 0x2b}, {&(0x7f00000005c0)="5e08fb9337fddc84a62f19f35054d4baf8fe24820912cb1d2b79216394c1abb1907a13f58e620fd126d09c2b98c4f17c7c93079adbd45966e7192264a7b0638d2847b8640b7b036846fd5408a6bda8f28804b023c3a7f595a421d74e957048582f99036cabdfba33d359d4a85f1d233dcfb3e67d9430ae1ae1659f8f0bd35f81215e4ed107557b9c0e7feffbcbb7ca5482e67b4afe4561eefd06d72f8b932a004bd697a1eb8d5fcb029b39d34af88658938a5fc83d69e9227824c599f263c48c8cc2e9ed65d6cdf7c795feb582d3a678f8a4523d", 0xd4}, {&(0x7f00000006c0)="4b778d29aca0ed7553091bfd7b9396e871b4005569179a6c3ac9", 0x1a}, {&(0x7f0000000700)="91a3d83f6a9aa90bc64163db785dcb5ec0ad7f20a7ab1a8f5b80453b293cff44197bcf7cf81bf009cb1e53c3077959c93caf52cbedd451b9d83815", 0x3b}], 0x8, &(0x7f0000000900)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x40000}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000980)="5cba825751c28f79a28d3277869a8399757ad0cf3e931b4f13659060656ae16b03fc2e42c8aa0119100c049117d46f5d1dab6c140e6dd4d157ede29b896000caec373a0260e25fdd2e985c2bcb0f1c0395137f61631fd56845e8ed6dd57f73f59be0c4c919e00cecf787b11303c185eb825d1214c8d255655e186469e4910b462a7b56f75b8d53aa34b96212db7ae1ac2755afc3062c5ee7715b6f481529db4337d1952f8c250341a27837a276fc5521ca56b315245f3d5646aa9ff6df37eb1cd76d7d8ff3e5adc6e7b0f83b81e718310f034d7f31", 0xd5}, {&(0x7f0000000a80)="3b4aedeb62501386c429fa75802b5a2ecd3a02e766689b1f7dc1cf084ac15295cc82540a576b46137a1b4fbfdbc16311ed523dcd489c4ae639836109ec04e7b73d99b460ac4ef20b9e21fa31a1100cc6abb261b236411e32afb7e5b4f36b02304b48776a154c418b322957a2f914fc987a362c09b1e4e4e0c8a70deb498a4bc5f7bad8bbf092d96285a8fc2c6951f42211c675553c08b7a656350f437e668daa69d86cf2dfd0138793c1b93fd1909b66", 0xb0}, {&(0x7f0000000b40)="9283cd8a1e82f311500a5187", 0xc}, {&(0x7f0000000b80)="98110098f6041de19438a6b201e5c62db1834aeadb3f9568a5371e66b350acacebaedcea3206cdf8f8b13106af3f2ab70f082e63e0e4ca0cd7c5ff064ff47b47917c4789f66f187ab99002f9fab0a071052dc2de56a106faa96addf2372b17fe48b5ea3239b5027dc991c99d2c9968f6e56bb96333910069e899a28ac2b56358ae531ee8d7d5dd1dabbdd14951b651f78f902945", 0x94}, {&(0x7f0000000c40)="b0141e3bf15aea735a8de7b896b6471604b1d5761e7fa2e21b7557669761c57b90289c0959026a3a47901c5cb2b9419b4bff5faed903ed5229315f55742c4edc56773bc085a10888a226dabf1d73bba28578d7ed7f7f9db76d6983c74e2d", 0x5e}, {&(0x7f0000000cc0)="d6c8ada662f253c36196f384977655bdf572336a2eb53772bf63211c9c8b179c42f8587b1b46cdb49a8702bde076205a31be172a52abd85dbfef6f62d6b564df0dc083866c0e588f20f39a3aaa0b602003335253b183adde5a6df628351dc4c73dc0bc60e16c0c10ba1b569d228d739b2a3690e134daa34ea0beb24053040cb692eef107f3734408ecc5a3a5800bff7ef9db7e4f51a9665c932f3b371ae6d92a9cdd59dffa8d003ee3f1e03dcc4b9c5925944a952028247641f34f53b53308e50cfc97c9b44b253726cdc2acaadbe0ca50045e6d6aefbd7814d9b9a798f3c4fc54ec63959141870789ddae4780ca6fd687194bcc4b4cbae9555d1cde502272", 0xff}, {&(0x7f0000000dc0)="43efafcae52ed87ed009da5f5a8aa1cfdda93fdc2980cc137ad864601e63a83ffc7e2f25700f2db0f6fa7f213414c8ab4a4d9e2d0d4209d78fba6437ac2f9db025a4d5bb8444509ebf82e969761e1ede511fec4dd46422a4c124592cfe71710e84d9f2c61846f05a06ec2c", 0x6b}], 0x7, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x18, 0x20}}, {{&(0x7f0000000f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80), 0x0, 0x0, 0x0, 0x11}}, {{&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)="336193ba9fd6548f9aff066ba5d037dfd24646c4038781c037266d2c2b268909b8b1d276d699c3631d410ba2e030f63eaa45c964f28f2022ce486bcb33c2907c761070b92635b54be2391697b32335badf7a84f5c30aa6b7bfa748d00ef3d2256626235eb08ac39292e65b853e1631ce55f08327ab29df147a24ba9d28c5341900ab1ec35719006c824fa16f832522485c78ab4f8831eb5526d0331dc9f4027507bc24078a2f", 0xa6}, {&(0x7f0000001100)}, {&(0x7f0000001140)="17edecb31c684de6cc85b3123f1036fb1528589bafe9f4e4a478b38f2939d7aa1177a27844ee415258608e05135b344596c3e7a9fd1127d7ea73eeef0a3d467e6bdf7f99ab0009c5eb4961ae9ead4b47aa55d28fea6a1a0a954c9352f1ab4b65cf03ee4f6bfb9f5377ffb8c19cabba22c243f2c5526e707c55e4bb5c6486c72bde6c7a8d156f43c068dd8d37a7252ed04585b0013e283fa4e241e0ca892adc9b066bdc7756a0ad4d130530424c211c0778f0f0805638a0183f582bcedb36e83b1f61a9062e4b331f", 0xc8}], 0x3, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40, 0x20000004}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001780)="f0e6e3a7d8b114b5675010323b4f847f26da105e9a868b8a20693aec8fef6043fab589e4c78cf7d5c6ddba5d47b08237b509d0885e08f2607f893a26487ae3dfd9ba672af6197a4d14d9e33fe68c42208bf38358bfe848978239112feefa7b5a9cf50c84bd3cb228cf7db2ea2c6ec34af76504f021bc8267539e46c681a576ac6a7dee47bcc596348518f625051505a7da01145ef315da4c4037de5faaa7612420f3e4a6c8df6f6e540b4cca1a0d1a81c38b8f1a2de85d9dab79be7db28be37b1b4e0fa0ba7862b50f2a318a8f99253bfcb44684", 0xd4}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="393343b234b76f0bac7d6984fbd61281102369c0abd77b9e0ddd915f6f318863a8b3f2b0f5814856f45a9643638ebc1c4620dfabab2078ee77589dcbeae82a941180dfd2697e3365a9f07c130dbf587cea217bc17edae21c8f759fae9b1287b1aaa50ea053817aaa34fba977b46b", 0x6e}, {&(0x7f0000002900)="7c75051f51a182618a087423c78fa1b8e4a7e74edcb3ee4787cb3fe2d2c3409205f723251ddc5faf28f1cd850041cc92834a1047355f6beece70c85d9e705e0e018c53ea184a599d9bef858cebb35154263b415d1648f4712882290302d028b03e47913fd0845611032fd57113eee8b8ac719724bb5a0b8a9294b5f14234fd6e193781e257e037efbb7f7ff69fa15fad4b83d17ea1874d3c44e07c0e95309461a39e1e2d276bc70b281b10904d5919228d96e6", 0xb3}, {&(0x7f00000029c0)="8ec9e84997422a3ad4a39dd0b581800e2d6745602228d4e85fa7c0462ac8371a8986db9d09ed4d8fc52a55d93f260ea28d7aa74b530e81d935b497e1c1f71406c92c70d3d65d5e14ebf9aa53b8f8f94b27efe1ac8a1ded45813b36a18337701b46e4f9cff0cc225371641a2b3b88c8e26e6ec2edf0c739e5ff2bdeca66148e8a777081d9693644d73f69595ccbf047fb63d6da07dc14be3f49cf6f6f2bc490a07869fc7fff63175149ec6a7172d8e570a35950de7bc2a31659b83604887aa722cce2449281ef515d3390d440c17a58ce1bd88867819e57d67e61f7bcc0adaa4c816cf39cd4d3939879d6b8af", 0xec}], 0x5, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x2404c040}}, {{&(0x7f0000002cc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002d40)}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x30, 0x20000000}}, {{&(0x7f0000002e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002e80)="0b2a9e6ab7f281e639ce7fcefcfb9da07f4f0f6b0289c61815fb6fec54c9cf34f131ac6a149f18ad647d1e7e582fbdeb26cf9b04b8df60c690a70737", 0x3c}, {&(0x7f0000002ec0)="701dffabf3a46a3f0199a01b612698b5be32e30ca71b41174f517899d7e66ddcbfa955b6f027e6520b026b652d506fbf9142c433eee2a1c47136f6da942e8949edbe800256", 0x45}, {&(0x7f0000002f40)="bcc0483ad19ec3090961a76964a63e0aa4a7c42817147167db2307510d1c33f61e64aee651e7064b85", 0x29}, {&(0x7f0000002f80)="2c237641b9652c33899a74d2396ced722b94607487f5a5d6b5cc30b3aa4bcca1217e03bfe0ccc0d8c39fce02bc570e7aeb046cba4023774fbb5abe7e8cef0cf1185ea747cc90bbca46306c819fd754ba43fcf54e987e9580e4c33132e27bc4874b837bcaf727e4a9", 0x68}, {&(0x7f0000003000)="f8ceb600898d0300ac4d318d5294461647d3011670d3d255985527b44a85fa9c4faf0537d4a0ff98847cb9c1f369681c6ce68add2102f6c35ec5414dd5407d75fb43244072c8bde9d8729740bf4dbf31fc4bd745855ad7bfbfb8f2b152e140f722b3aa7e960e2444ba897ee83a3b3d6e4dd470774ad5e17b05e963a334b618436a0ee971ba0e2c7f7710f309148e471a58a4d1ebd2e475070f9202691d6902f6999b2b5277c0cf9b", 0xa8}], 0x5, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x40, 0x4010}}, {{&(0x7f0000003180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003200)="7970816fe1fbba4cdbe4cc8c2968805a231178787520518ac58b1453ab12d978992f03bebfa3158c06b5d4a2d045c42caa32f7c38ef0519efec97e71f7023c2fa67df180ba91b3b6924adad6b6ef446f7ae932228ae438a7d7e571025cc62db01f97bbaf86000b6a4724d0dd09389a5887ef1e9eac2885ab59688e542a6c2724e6850563db3151508f509c73c926e2347b42e480925be5d270673e", 0x9b}, {&(0x7f00000032c0)="fe6e59e9ddeaaaf135af08397741c18ee1b561a40410382d2f31d8baba980dbbf3484fc82017e4e1d42590081c9957ad09e94993149e28074bda300ef66e59e8a1c02af5f3958936d60269148194314a997a59fcc3b82fddecbfa03065e6320350163d1ee1f580831c37ba13fcc20ea3f2323505a682d149238799f0772d1a202bf69aded7672c389946af80aa720ce4bbc4121b9f5e6245aa5db603fda56c359f00c533be0ae25f5a1f95c67e61ffc15967463f3bff95a237", 0xb9}], 0x2, &(0x7f0000006280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r4, r8]}}], 0xa0, 0x440c0}}], 0x8, 0x48000) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:14:35 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3600, 0x0, 0x0) 03:14:35 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 03:14:35 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffdffff, 0x0, 0x0, 0x0) [ 2787.854249] FAULT_INJECTION: forcing a failure. [ 2787.854249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2787.857316] CPU: 1 PID: 13682 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2787.858782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2787.860541] Call Trace: [ 2787.861100] dump_stack+0x107/0x167 [ 2787.861868] should_fail.cold+0x5/0xa [ 2787.862686] _copy_to_iter+0x264/0x12d0 [ 2787.863535] ? __virt_addr_valid+0x4fa/0x5d0 [ 2787.864484] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2787.865517] ? __virt_addr_valid+0x170/0x5d0 [ 2787.866456] ? __check_object_size+0x319/0x440 [ 2787.867434] seq_read_iter+0xdcb/0x12b0 [ 2787.868291] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2787.869333] kernfs_fop_read_iter+0x456/0x5f0 [ 2787.870283] ? rw_verify_area+0x11d/0x350 [ 2787.871152] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2787.872183] io_read+0x2dc/0x11e0 [ 2787.872926] ? __lock_acquire+0x1657/0x5b00 [ 2787.873845] ? kiocb_done+0xc90/0xc90 [ 2787.874643] ? mark_lock+0xf5/0x2df0 [ 2787.875433] ? lock_chain_count+0x20/0x20 [ 2787.876318] ? __lock_acquire+0x1657/0x5b00 [ 2787.877260] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2787.878357] ? lock_chain_count+0x20/0x20 [ 2787.879244] ? __lock_acquire+0xbb1/0x5b00 [ 2787.880138] io_issue_sqe+0x2e8a/0x77d0 [ 2787.881037] ? find_held_lock+0x2c/0x110 [ 2787.881905] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2787.883004] ? io_poll_remove_entries+0x30a/0x540 [ 2787.884020] ? io_connect+0x610/0x610 [ 2787.884826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2787.885934] ? lock_acquire+0x197/0x470 [ 2787.886769] ? find_held_lock+0x2c/0x110 [ 2787.887632] ? __fget_files+0x2cf/0x520 [ 2787.888480] ? lock_downgrade+0x6d0/0x6d0 [ 2787.889362] __io_queue_sqe+0x90/0x9d0 [ 2787.890187] ? io_issue_sqe+0x77d0/0x77d0 [ 2787.891056] ? __fget_files+0x2f8/0x520 [ 2787.891895] ? io_prep_rw+0x7f5/0x1050 [ 2787.892730] io_submit_sqes+0x44ab/0x8610 [ 2787.893639] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2787.894692] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2787.895709] ? find_held_lock+0x2c/0x110 [ 2787.896600] ? io_submit_sqes+0x8610/0x8610 [ 2787.897517] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2787.898526] ? wait_for_completion_io+0x270/0x270 [ 2787.899545] ? rcu_read_lock_any_held+0x75/0xa0 [ 2787.900524] ? vfs_write+0x354/0xb10 [ 2787.901300] ? fput_many+0x2f/0x1a0 [ 2787.902072] ? ksys_write+0x1a9/0x260 [ 2787.902870] ? __ia32_sys_read+0xb0/0xb0 [ 2787.903733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2787.904839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2787.905931] do_syscall_64+0x33/0x40 [ 2787.906717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2787.907798] RIP: 0033:0x7f01ae28cb19 [ 2787.908591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2787.912470] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2787.914086] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2787.915593] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2787.917108] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.918606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2787.920104] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:14:35 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a000000) 03:14:35 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 03:14:35 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c00, 0x0, 0x0) 03:14:35 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x30000000) 03:14:35 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4800, 0x0, 0x0) 03:14:35 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 03:14:35 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) 03:14:35 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ffffff, 0x0, 0x0, 0x0) [ 2804.158341] FAULT_INJECTION: forcing a failure. [ 2804.158341] name failslab, interval 1, probability 0, space 0, times 0 [ 2804.160503] CPU: 1 PID: 13747 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2804.161739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2804.163173] Call Trace: [ 2804.163647] dump_stack+0x107/0x167 [ 2804.164292] should_fail.cold+0x5/0xa [ 2804.164992] ? io_setup_async_rw+0x180/0x580 [ 2804.165772] should_failslab+0x5/0x20 [ 2804.166445] __kmalloc+0x72/0x390 [ 2804.167060] io_setup_async_rw+0x180/0x580 [ 2804.167797] ? iov_iter_restore+0x195/0x3a0 [ 2804.168584] io_read+0x775/0x11e0 [ 2804.169204] ? __lock_acquire+0x1657/0x5b00 [ 2804.169967] ? kiocb_done+0xc90/0xc90 [ 2804.170634] ? mark_lock+0xf5/0x2df0 [ 2804.171297] ? lock_chain_count+0x20/0x20 [ 2804.172328] ? __lock_acquire+0x1657/0x5b00 [ 2804.173298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2804.174225] ? lock_chain_count+0x20/0x20 [ 2804.174963] ? __lock_acquire+0xbb1/0x5b00 [ 2804.175714] io_issue_sqe+0x2e8a/0x77d0 [ 2804.176419] ? find_held_lock+0x2c/0x110 [ 2804.177168] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2804.178085] ? io_poll_remove_entries+0x30a/0x540 [ 2804.178931] ? io_connect+0x610/0x610 [ 2804.179594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2804.180528] ? lock_acquire+0x197/0x470 [ 2804.181234] ? find_held_lock+0x2c/0x110 [ 2804.181949] ? __fget_files+0x2cf/0x520 [ 2804.182642] ? lock_downgrade+0x6d0/0x6d0 [ 2804.183369] __io_queue_sqe+0x90/0x9d0 [ 2804.184053] ? io_issue_sqe+0x77d0/0x77d0 [ 2804.184793] ? __fget_files+0x2f8/0x520 [ 2804.185490] ? io_prep_rw+0x7f5/0x1050 [ 2804.186178] io_submit_sqes+0x44ab/0x8610 [ 2804.186926] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2804.187792] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2804.188667] ? find_held_lock+0x2c/0x110 [ 2804.189394] ? io_submit_sqes+0x8610/0x8610 03:14:51 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c00, 0x0, 0x0) 03:14:51 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:51 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x600, 0x0, 0x0, 0x0) 03:14:51 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x36000000) 03:14:51 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 03:14:51 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:14:51 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000480), 0x4) r6 = syz_open_dev$evdev(&(0x7f000000b500), 0x4, 0x410200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000480), 0x4) recvmmsg$unix(r4, &(0x7f000000de40)=[{{&(0x7f000000b540), 0x6e, &(0x7f000000c680)=[{&(0x7f000000b5c0)=""/4096, 0x1000}, {&(0x7f000000c5c0)=""/33, 0x21}, {&(0x7f000000c600)=""/63, 0x3f}, {&(0x7f000000c640)=""/34, 0x22}], 0x4, &(0x7f000000c6c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f000000c780), 0x6e, &(0x7f000000d900)=[{&(0x7f000000c800)=""/100, 0x64}, {&(0x7f000000c880)=""/86, 0x56}, {&(0x7f000000c900)=""/4096, 0x1000}], 0x3, &(0x7f000000d940)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f000000da80), 0x6e, &(0x7f000000dd00)=[{&(0x7f000000db00)=""/115, 0x73}, {&(0x7f000000db80)=""/254, 0xfe}, {&(0x7f000000dc80)=""/11, 0xb}, {&(0x7f000000dcc0)=""/58, 0x3a}], 0x4, &(0x7f000000dd40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x3, 0x10000, &(0x7f000000df00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f000000df40)={0x0, 0x0}) [ 2804.190377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2804.191352] ? wait_for_completion_io+0x270/0x270 [ 2804.192196] ? rcu_read_lock_any_held+0x75/0xa0 [ 2804.193031] ? vfs_write+0x354/0xb10 [ 2804.193683] ? fput_many+0x2f/0x1a0 [ 2804.194320] ? ksys_write+0x1a9/0x260 [ 2804.194985] ? __ia32_sys_read+0xb0/0xb0 [ 2804.195696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2804.196626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2804.197521] do_syscall_64+0x33/0x40 [ 2804.198165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2804.199055] RIP: 0033:0x7f01ae28cb19 [ 2804.199697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2804.203119] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2804.204790] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2804.206173] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2804.207411] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2804.208683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2804.209913] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 sendmmsg$unix(r4, &(0x7f000000f3c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="cb850e722c4e4e38c81951ca2181023329b4ae65fd245b284e1bfd621cb608640a152caaa1c3173372f76c1ad308f65a8f37659f30c560b14eeeee2960db1006004796b1f7d6a5d41fe2852c7c25afa4dfbb28b7cdc939b011273aeba85fbb7f4d230441aeaefaf270a69ee29cf92dbaf71dd313044ee898a57e9711f32c8126fa7174f579d75c9175e09ab12c2abc3b30664f6af02b0f10d988fe5a115d9f95", 0xa0}, {&(0x7f00000004c0)="5cac6b36e9bced7f4caa6c6426ce82486f2c656697c8772ca48550e660273c3de67a0d4901ae6dc9e41c904a7213636e636a12353c63cc6e65f3d115e82f39b159d0ac804942ea09fcc68353f8a6768e3d4c7e1502dc4e4810f4f6d103f24c69775ae2777fe4514d1f7af75d440e7d4d77ecb56f10bd8229ea5c58c6eb5e7d2b188bba9fe306fda11f0ba8726849756f11b0438a055f575a2e8da4ffc96b653ba3d9b5a2c0327cf887bb354b81b4967d0610054208d8e46aabae9acb89abf592467a7e8eeccc0033498b212f9d4208444dcb4c14375b55fb689bf8aef036bf086247e11499ea78de5311caf4", 0xec}], 0x2, &(0x7f0000007800)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x800}}, {{&(0x7f0000007840)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000089c0)=[{&(0x7f00000078c0)="b868b81a8fcc29a99a65b5a51cd9cd20bc439190ba090d73c581c29d17097cf1ec91dffb20b2b027725152b86cc82b5a", 0x30}, {&(0x7f0000007900)="23c17a42ab98f86e86558dd6d43dc54b81f0c4602c798d9ba3014f4fd1ccf7e22c381ca40d2246db17af1854600ab8f3f43080", 0x33}, {&(0x7f0000007940)="12bfb05b3583417be997718ac8d9e24e2c966da48f89e72c720060b3554fe270e903af8a59db1461e7688914e7aaed9553b4255aedd4ce9396ed50765220880d0c7c8a193c68bd5b4129a541973661a9285362a9aeebb6b2ee0f15c013b51754f8c3bf963b19978346d03026d276b37049af7c", 0x73}, {&(0x7f00000079c0)="13d921cbe456f70d15595bb21707162822fe5f8d38f81e1d6245c3028890251c4f385ea2782e6d7ac9c6a6e7969d488365744d5123e5209dd7cb5629f5ca1292db221d515f2ad89e34517789a7699da675be33ab171763c5cfab3d47a41e5bef9901bb7e48a1d83bdc52e5623fbe4b35a6af800f2fdaac52ab11c602988d8aa933c1ba7a673b079bf608bb7505ad555a5c7a5406086edfdc520aa23b45f1abe897da2079f41ebc6507e530dc9a0e9dd225bb80a1a3a53d5ba523c372f24683757c08a4070730518af8ab3d4f3c418c79bcc932635fdf637c6408ff53f4596ead28f060e6f962a51e092290dde27b1fabb4143a57a1cf8f2cbd269383788bba9160ad5e371d5b791fda91297bdf817de1c6d028b85d23e204708f3cc62c51baca6d0a3aca407c19d251f64b8b50c80a02a208e8a364260df1fd6b481683d0110f4b660ef69e4484b5872de72355fdcd0d720cea8d4b779a52cccf044a2a0875dcf0c8b570e8730cdf9e101b0968569b475e67c10f0519d217347afb8879248f7bed0f679a9ffc0356ec11c66c1e725baa6577524b3570497b6077cb588c0f294746ed5a5027bb1f074fa35c5ba80e1c0683370e433a6e6067fdff53b63128e57210ea060291670669d533bf67744296544174ead13f24d55fad3f8655ff5496ec8374bd2693df8aacef77c8afaf2adcaf281188d271c13c876d36b8fe81710406d826149b0af71f719ca629420dd167cff24715e84c050566b52e464fd5cc554b755cbd782faf446a117d0bc6df69b97825af33e00bd8b27a7b7949ad35feb3c0b49118fd6477db2445f52f08adbee9a99292373f1d71ba3825d1dc63434a8ee1e693d7cfe34284afac28811b52403098db4f56ed6906906f256212a4998e72eb80bc09393d73949cdedb629225c2a7f4f03a608a80bf9ada22433abb36310536cd82c8b2750d0e7eccd70172c22ab69f057a9971688a80eeb38cea007904feb6073fb556e413aa3cb9e36193747d5d8c2190fa36dc3ebab17b9c3557f4feebca15fbee510d46bfcb6868b48c0254aff267d87ac69573bcdcb692b30ea15a137489498a7cf02d27436c9d12530c1f4329c258c8b7404752c5945f191c889147e3d7974e1d199e90fe12f27d839161461115a7bf1c57922ba87310d000204e16e16886952d42b0f6bb9d0c572c2854aa68d4efe8b9cdf3a3994bd878a793684f4956f1ca559a969095c94f4cbbe5c02b54b10e4c35f2c646f43fe8efae6d0c0a9ea21619976982d8e16570ee636ca49115f3695f6e604a64910726f2e56237d2f35bfe31ffcf05752207096690b9043f7743b70f13290f60db4dd1222b7b3707a667bbeb82e4746a1fffce955356154c5c1ec84ebb6fb72bdeb7b56cdbb804f84a9b892b9932e094a6c3410854c94fa95141684724c256c2204233c1419c2c9cf5e0c128a181b47b0c8013ed5b1cbe6196ab978cc5ea51952542c053447cf1915314c85a5a1f46b128f953c68d5f1fe58857c2688d41eefd3d3e98487dd8274ec986d2cd53fbe23f1b1f3bc0802bfcfe3ff3f05806ef7e3863f1560ad89d2d5b828fe98af2b1ed64403f751a8679fa3742916cd9165aa0fd45c3109e21883b0ca1b16e877be4363058714aafcf172685304dd6f7256f1bfd545baf1d2362206445a60b67c4e53c6faa87362e9fa44ce06485923d4f708a3d9af3e46da9da47e6250b1b87f356aebf0c03cfec746cabcfe2f5bea8548874e38f8112722fe2c900cc1828028b2f045409ba1a47929e5ff8e885fc13ab59ccbab7eafefd3f86ce8677d30a1bbc31d0d58ef743a6836c52cba1707932902c02a32e986b1367601b7468d561ee71d8948e4e09a454c7c1d97db2e40eff3798daf82cc42fabbb8c4beafb84461475d401b965a6f3254bd2871ab5a1009863c7b8bef6aed24961db3f7188887d6d483417c2a50004a917f7e1571eda57a0cb3904b3f9a05992a317c0de0fd9e089f2b4ea9f0f3841942f83cf4d2248718bdf0e10dfa368424bcf1d2e08eeb6e30439d565d79a60b2db46780c8839358ec534b789d5ba82ffdec208f49637554fe7d8e6001f07ea3fa0536a069c983457507ab99da3fef5f37e5981774972f90f5512d7615649006f75dfd373def435789662d694955c30acffaac9705254e7b7fbe3b1ceeec2c0508eb744c546ca2fe31d45cc92ab225f196f21bb73f9335c5bfb16049721a2fd2ebf6a7dac779331241d5e2804734604757f0ccbba24193b0fa831172d80bb6ecc83750b369c2b63cb6ad6cc9621fb996734c2776e7dfa77caa11a1742c43e099c2e661f3cd51d1f1542579ac93c05665448250988356be635b2c011eb2cac4d66e6f1c3fd4836d1426ecbe0b228dda881be6c57d198d3f416c487c14d2cffdf28c377cc1b6dfbdf0feaf3b80dc9c9f06a8b7973d48e1722bf8176221cc9142f9d8657bd3f3628a42f664279e346e2188861298e76a74e07bcd335b0eaf51549a4c2958006a79749f034c42ed5b6b2f81e93d7ff38b985ff9c3c7b9e453e1c925f4ba4f6aad4d8e725066b6dee68e2a72df968fe2aeb51e5b6d774f38b9faff24c8edbcc8a56eff105af848be826a3b46f5ea1347e7990bb34b04d627c0d2d604c071d6cc4a3aa154fbb01fed1e46ab96c0c094492ad70357f889ca7a125193f3feba015430fed74a95ace1cbb715caa1d038e8194a5ab7e0e861bec281845a9ba1c0aff873b197ae66c4a9a0a17f0dbf822733cadf8cd7ce5b742cc9918ced0cecc90f471873ad38d798c3f7f43dad1298a9eb63da3f6794c571e0a7bb3cacd9a82825acaf2696fc38bbb7ad515696ec1419e179b4e10082d211a2c18f37f23acb8e4f8dc98efbf929be145908e5e589473e0c389f45e7a4d2a092a06701665d4640ce48872ee13c5d1f4047300c11c712153988de12a27cefeec6c8cf652214880636f9bc21fa836309012978994a270a60f5216fd4ffe471887e6e23127132a4f32141272af09519687e1f8d83ed960f6d18ebf198b6110326dcfed94a5bb482350cf8a5cdd5353c4542f52c48532ae60a6130e776c496fc05f653e5e6e8b6988813af927d7d09c6cae20606e1cbb29c7e8c424a07629221784781bc586bd5f6e2da9d8d95c99e7bc83d9ee95b136049043fe716cfe0475a891cf03be4d760090a9db8c5bc30bbba4f2e84780191e15c08b0b8f36d99f21849da6a68162d054b3059b60d1205277f902cc55f59b00e21910b691af8d0684195c2f718f6d861b0b3ffc3084d36d6441e317f4cf6081f04dd8e0739f94ae953bf410ce88305fa3c8de93cfb585598d1177d0b36f0edb83710fda16e9c9dc7c6be17b07acd23865062615faad463f320b475c9c942945a6024f6bce97724b46cd35cc20146b9d2504ed7b629700b1687ca05b38cf3cd2b4b1227bbadc42932ac8b8dfce02b7d1c08a2d316afd6972f8f44b478ce112dee90abcffb489e20b80e9ce2b2d8dcf68c24634ac68ceb5c6e42416555d867ff2ca69b2c057480fdb21846325ff07d5f022a5a5870e5fe0a75e44c54c4060696a7a8e113e8037d9d291d7901a008c29d43a20bf1246a8b1bf0c6c1ea7be975d5bf2c8efb2932d4d0609b9c69be524c669cc720d813ecb831b7f1058dc734c619710b9c27da027fe1fc5834c5ecbbe9cfb0373a7a3d3dd0f583950b6c92637f6f2a141df79e2dfbeb37ba83e90c33293ba94676aeb7306a95c775db17209660466ac46c9b00a582794693c364dccb2fafea9b2e6d7ddbcab371d3ad1a9cde231dcbe799c7b5d8dbfcfaf54e82d518bf184531820be3eda8578c4bbda4f6862a52878cfdc432fb9fcb08a7fda2e78b3f43d2d1c1fcf71639234a107cbc6046c672f5f93d5f3c6f330c6f951f304ea0241c7151a383d1c349c639f76b3b6e9843a8451c9b9b4fe7ba85068bea903aaaeecd2f2fbc90b655708763e40f7f1891d47529b22e5e3b3bdd1d3d790e43a6d4455bcc92071c88befc735c28d93b431965acafa10717fee3cd0f9c310df5c9bc0c36127ba954ed86432bac4b76b93dee4ddb2bb8f7e37daac7c30dcd6f75d4b89074ba5a6dc3f4a023135ad7d7593865e3375d4a41efb9b010c2d75d48c230177ec2072ec42fa35ddc58cd54c542a1c2d34ea4b82935a77716a4173114ba031fd42d4a49d0c6c30e3e74de027259b9c606774f563f336a708b601e4a636e2fb3a9b0a2e9ee5d6f076f92fbcd1db77c2a2f89b3f7c87ed67e3afd801d7d4ecdb70098c334c0f378bc7a5984299ad2cd326d5f6783896f3195ec8c72b585581b8a056fb0e7efb23b268eda144b40535e4bd8cd6ddaffb7d94486388600d6c257f59860a99cfcf4db16883b6f8eee642c0ec361f257be0c9109bcbe9b926b292bc07877c70a09880decee42f3d885d1fbc042a3ef039f81586b236c49154d26c2008b818d27aa1c5df8b6c899cfa7eb5f5a8e4fa139459706d98093aef73195ab74cc8ffe8e1265cc71f1c8b3ecdb0ff6f620efdda3469e32133fd8b1022ab1fe9b828375ef325663786c9a49129db71d728efe3158416ef4bee9662f51eb8e8ce2f1bfbdc604f663c51642e5e9518404800a14750f84fef2f180a636cf21ea82abca0a24d265464aa121bcc13d380a1ce0d4cc805d0c76cc54a9654ed2bc6ffb7c5aa290e99f6d4cd9ed78d8206a7bee45dc8cecbeac12addae1877211fe27ee9d9fab9f2fd7e6ce0277c05902bd37091e688e59e6fc39641e22f7d08ebf2d14402b44c3a5eb9fdfeadfe6a5f6cdc9c17f68bd9462a5596fb871f4cede78b08cda8d61d39b9445e6d8e29740589465c89685b543bb75e5582b15e43198135ebf94a65ae1b855de56035cdccc882284af11217c3105a6114999718e09c1d2a4cc033c435b86f83424754edc1427cb58904c76ae3c6dc2aff12b4b6a67a888626fadf73958af2c461f27c2444df6bb23e4701a5efa0fb5beb67497ed902ebb81ab73520143393f284cdf4a5e0afc01d3bd55ea7ec24e080cbd615538ede5e73b29f11e1f165123cf84fac97777c12c763601f3aa08c02cf9edc849fbb33b9e9a3f97f68f76db0c1b2a0d6ddd449fd97a420e1743a3679ebe5508f007ddc6418afe19b73bc32ada64e5de67a7117b618c6f719f82d85d051d25cc77429c2b4ed953d6df19957414d07ffe8286400f21d70c55a7fb4cc3437d9a6d016898271afc5b50f73f5230b0410bd0668573200c3f5d8306a8a2afb4f6e802b1e87f37b15e451798f8764a8da3fe37dc75668f93de650eb71b46fb18509f57e197e1615e8d692bcdf3d5e68a20a8b7f3e53a1f83e7ccfdfd9872ae36232f9fbb713b8f8c5698b10018dd1c658230a84d4bca7b3ea287cc533fa499d7614b7cb80b5025be006f3fd9605df4a46b852a0b9e5b8b9d04ada8ff4f7767b0187e7e60e8d9535fb95937b1a1600dc680cef41b2fe514cf932a39bc7b9efbca0f0cbab3949c767a5c161c184c2608bde95f86c5c13505c06e7bc2d63798dfa196c98f33b689dddb6d08ba24307c67ba51f703354f7306a73d2f3063bbc84196c2ab5175f4a84e270064ac01371b14aa1180023d6a7b556e240ac3ef51164e6a146f2ed84714224d107f78c7da4e8e3f94d1b7e967df3d0172cdadd52d5b1b93fd5c703cab43ef4020b8f2708ab6eb30ff2971ef31e085d71723fed101af4bdbd25bbeac358d4d6e437c6348df50d87c8c267c7c77f96e143b77ba2d311e732dbf1bb236471dad1ffab5b40fbec69cce0be69a48dc331b8e4e4cd5ee15ce2094a596c0846", 0x1000}], 0x4, &(0x7f0000009f00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xb0, 0x1}}, {{0x0, 0x0, &(0x7f000000b100)=[{&(0x7f0000009fc0)="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", 0x1000}, {&(0x7f000000afc0)="9a4f773ef8b38f8c97ef537e31bddc90385c8a06ef6dd57e8b61b12a63635531da8a956543f429897a90ea209451373b13731b1d7c7080f9b42579247940ce32dd187e01a809", 0x46}, {&(0x7f000000b040)="d8da2443ea02eb394ca684ef4b7d4b0b628d70a138f3daef24c0fd0eb8648a8db3484da0199c63578a7ae4b1f81dcaed4062f827978202e98a7f9398ae7c392699891ea5624f2af4d8b8a1c560400dafc78f59e375e47cc2", 0x58}, {&(0x7f000000b0c0)="b76db57e90ecc78ec51a3de5c03c", 0xe}], 0x4, 0x0, 0x0, 0x4000004}}, {{&(0x7f000000b140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b4c0)=[{&(0x7f000000b1c0)="e7378c809f22f49d824d201a2f4e67136b9bd507080cbb1079b9a555003dbe2540c89f194ad73aa89660bd79d394fad5bbb374794507953a4c92097e2f5f9bd3b0091bc8f7e2c5e435cb64e8c121169beeb5a4f6b4279ca984023323c03b2a6cd0bca2abb972762a8dd280c14f1bb8122f66321b09fa13d717dde8f31d42110efcb51230cb3b65a969064a908687a4223f019b87afad42c85ec8a8f8ba87e5faf744e1e66ee247c19a5dcc7201a157f50d6ca8a91a7bb1eb1a424a11b6a0ed0cf7bfd54c3c97df88a71befc76e5580539bbe000887b35e15c036b5fc8230254f27049cdff1e21c45bfa159e97ce20aa1", 0xf0}, {&(0x7f000000b2c0)="e80b805d743192faaaf00710d7f328f6a6", 0x11}, {&(0x7f000000b300)="e525884257da4ccdcf60d26353e43e887ecba151a560adeaf44c8cef95473d062301d50ef374b0d28cfee4a800452a833d15ae78b5a4f51ca140b8906a06fa25d055f9da5b33ef4ddd245ee0c3d23c61691858ac74e6066c89e0299ee4fa9816e5d86b472b30f7cbf7fb7253ea2d2d4ecc89d38bdba0fc40a776e1236e98c620c08a9d138abde3effc9d1becb276658bdce861bad91d1d76f8a071be7718e809ccce4d357d7745e996245aa83618496cdd27dd51f5fb7b314216a1bddfe42eefcd0997b3cb0a6bc667317100a4", 0xcd}, {&(0x7f000000b400)="5e8a4f24de69c72e5a77dea902f4c1ff059aaf8133478e92b3bfc83d8fb9e006dd42ce5abd740a9653eefe7aae4c630ad759e28b1775dd4872cf1abf79a94d194c78bd36be9101e657ed0535b27dd817401f910291b31074794e2f01d3120a487832b843c371049c991ac3fee6e5056656feced0e9199babc9342a361831f6e69eb6258c75e6f6e03414b1de7fe5c6dae4b63873dcc34d19d824b631a7f1b5a9909f7dc04768ef1d0bbf9a8c9dc168d5", 0xb0}], 0x4, &(0x7f000000dfc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r5, r0, r6, r0, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00}}}], 0x70, 0x4000}}, {{&(0x7f000000e040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000f340)=[{&(0x7f000000e0c0)="3428d823f7b2bcf37a08c2c66028b83c8c394f43e4f3070037d38f8925e908bdb7b4de9a6f98052be123c0560e5dea8d38e5939c1771b051ce17dd421f9fdae1d830cee5f99a6694a88ec0e62d1c", 0x4e}, {&(0x7f000000e140)="1572fcb7e5cbbb1d5de81cda8892087094947874da5fc4830218e8b972cf5ac8f5dad5bb5d1d31c956ac8661c43549f4cd2ed9528b858606d1c5673fd400b9d914a6bd87bd3fbb97dfcef5184e01392c236b868595ede12e08cf3ebe09e937e6b98a90866e56d6c2414cff1fe8b30fc6c624e12cad4d0e38105f3d88d733a49faf08eec3efd60263b5b0de9053f09523e61a77db3b73dc05a343c921d4df", 0x9e}, {&(0x7f000000e200)="eb7d27f8747a1432932a780dfb2fede7177b72e246ec39a617b40600925ba099235e1c1ac1407b8ee584a0d0a25e485bda851d6807fb0e4849e77136591d9e08f5cd4c4a2be2a02eed9fb32c97429ce0e5108f6f6c31927a68fcfcf0e87ff99e0aa36502b502d03f6a2dd256dd1d43b456202c6897f29a83e5ece00f210356c358f822b18ef5f3796cc61e9057eb7075cea936139c520c541298ce083916456b5c75cac0d7d9d091dd83d8eb06bddaee13bb0ae096e25e668b38e0355c6ba925f194c14d592ee7eb90af328e6775f33d5d9ecc605ce62c0399e1214206f33513e871254ee7", 0xe5}, {&(0x7f000000e300)="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", 0x1000}, {&(0x7f000000f300)="bbb9b242aa0ce74467e382ac80a96c6b46c59650cd2c747731803e379a75829c788895db1570e5402f1abbd90c056da647", 0x31}], 0x5, 0x0, 0x0, 0x8000}}], 0x5, 0x8000) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:14:51 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 03:14:51 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c000000) 03:14:51 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6800, 0x0, 0x0) 03:14:51 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 03:14:51 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x700, 0x0, 0x0, 0x0) 03:14:51 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfffffff5, 0x0, 0x0, 0x0) 03:14:51 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffff) 03:14:51 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c00, 0x0, 0x0) 03:14:51 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x48000000, 0x0, 0x0) 03:14:52 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) 03:14:52 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 03:14:52 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 2804.698412] FAULT_INJECTION: forcing a failure. [ 2804.698412] name failslab, interval 1, probability 0, space 0, times 0 [ 2804.699868] CPU: 1 PID: 13801 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2804.700709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2804.701708] Call Trace: [ 2804.702035] dump_stack+0x107/0x167 [ 2804.702471] should_fail.cold+0x5/0xa [ 2804.702922] ? create_object.isra.0+0x3a/0xa30 [ 2804.703469] should_failslab+0x5/0x20 [ 2804.703917] kmem_cache_alloc+0x5b/0x310 [ 2804.704403] create_object.isra.0+0x3a/0xa30 [ 2804.704948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2804.705548] __kmalloc+0x16e/0x390 [ 2804.705977] io_setup_async_rw+0x180/0x580 [ 2804.706482] ? iov_iter_restore+0x195/0x3a0 [ 2804.706988] io_read+0x775/0x11e0 [ 2804.707406] ? __lock_acquire+0x1657/0x5b00 [ 2804.707921] ? kiocb_done+0xc90/0xc90 [ 2804.708373] ? mark_lock+0xf5/0x2df0 [ 2804.708841] ? lock_chain_count+0x20/0x20 [ 2804.709332] ? __lock_acquire+0x1657/0x5b00 [ 2804.709857] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2804.710483] ? lock_chain_count+0x20/0x20 [ 2804.710975] ? __lock_acquire+0xbb1/0x5b00 [ 2804.711479] io_issue_sqe+0x2e8a/0x77d0 [ 2804.711958] ? find_held_lock+0x2c/0x110 [ 2804.712447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2804.713098] ? io_poll_remove_entries+0x30a/0x540 [ 2804.713664] ? io_connect+0x610/0x610 [ 2804.714113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2804.714735] ? lock_acquire+0x197/0x470 [ 2804.715201] ? find_held_lock+0x2c/0x110 [ 2804.715675] ? __fget_files+0x2cf/0x520 [ 2804.716148] ? lock_downgrade+0x6d0/0x6d0 [ 2804.716658] __io_queue_sqe+0x90/0x9d0 [ 2804.717119] ? io_issue_sqe+0x77d0/0x77d0 [ 2804.717601] ? __fget_files+0x2f8/0x520 [ 2804.718066] ? io_prep_rw+0x7f5/0x1050 [ 2804.718529] io_submit_sqes+0x44ab/0x8610 [ 2804.719027] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2804.719620] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2804.720189] ? find_held_lock+0x2c/0x110 [ 2804.720682] ? io_submit_sqes+0x8610/0x8610 [ 2804.721196] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2804.721767] ? wait_for_completion_io+0x270/0x270 03:14:52 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c000000, 0x0, 0x0) [ 2804.722338] ? rcu_read_lock_any_held+0x75/0xa0 [ 2804.723119] ? vfs_write+0x354/0xb10 [ 2804.723551] ? fput_many+0x2f/0x1a0 [ 2804.723987] ? ksys_write+0x1a9/0x260 [ 2804.724437] ? __ia32_sys_read+0xb0/0xb0 [ 2804.724932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2804.725553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2804.726159] do_syscall_64+0x33/0x40 [ 2804.726594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2804.727193] RIP: 0033:0x7f01ae28cb19 03:14:52 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7400, 0x0, 0x0) [ 2804.727634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2804.729953] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2804.730858] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2804.731709] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2804.732557] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2804.733397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2804.734230] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:15:04 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffdef) 03:15:04 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) 03:15:04 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0xffffffffffffffff, 0x1d, 0x3f, @buffer={0x0, 0x0, &(0x7f00000003c0)}, &(0x7f0000000440)="e3070488fbf3a35b7d87613bf16855366d5a94b4ea0ee9281cd5ece31c", &(0x7f0000000500)=""/62, 0x7, 0x12, 0x2, &(0x7f0000000540)}) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13, 0x1, {0x0, r5}}, 0x67cc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/clocksource', 0x4a5c1, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) openat(r7, &(0x7f0000000280)='./file0\x00', 0x8000, 0x1c2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:04 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 03:15:04 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a00, 0x0, 0x0) 03:15:04 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x68000000, 0x0, 0x0) 03:15:04 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 03:15:04 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xc00, 0x0, 0x0, 0x0) [ 2817.605846] FAULT_INJECTION: forcing a failure. [ 2817.605846] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.608632] CPU: 1 PID: 13827 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2817.610272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.612155] Call Trace: [ 2817.612760] dump_stack+0x107/0x167 [ 2817.613565] should_fail.cold+0x5/0xa [ 2817.614413] ? __io_queue_sqe+0x666/0x9d0 [ 2817.615331] should_failslab+0x5/0x20 [ 2817.616181] kmem_cache_alloc_trace+0x55/0x320 [ 2817.617198] ? lock_downgrade+0x6d0/0x6d0 [ 2817.618121] __io_queue_sqe+0x666/0x9d0 [ 2817.619012] ? io_issue_sqe+0x77d0/0x77d0 [ 2817.619946] ? __fget_files+0x2f8/0x520 [ 2817.620843] ? io_prep_rw+0x7f5/0x1050 [ 2817.621715] io_submit_sqes+0x44ab/0x8610 [ 2817.622675] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2817.623786] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2817.624878] ? find_held_lock+0x2c/0x110 [ 2817.625796] ? io_submit_sqes+0x8610/0x8610 [ 2817.626761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2817.627845] ? wait_for_completion_io+0x270/0x270 [ 2817.628943] ? rcu_read_lock_any_held+0x75/0xa0 [ 2817.629987] ? vfs_write+0x354/0xb10 [ 2817.630822] ? fput_many+0x2f/0x1a0 [ 2817.631646] ? ksys_write+0x1a9/0x260 [ 2817.632516] ? __ia32_sys_read+0xb0/0xb0 [ 2817.633443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2817.634639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2817.635797] do_syscall_64+0x33/0x40 [ 2817.636576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2817.637669] RIP: 0033:0x7f01ae28cb19 [ 2817.638502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.642543] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2817.644263] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2817.645770] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2817.647376] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.648979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2817.650417] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:15:05 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c000000, 0x0, 0x0) 03:15:05 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c00, 0x0, 0x0) 03:15:19 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 03:15:19 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1200, 0x0, 0x0, 0x0) 03:15:19 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 03:15:19 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffd, 0x0, 0x0) 03:15:19 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) 03:15:19 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x74000000, 0x0, 0x0) 03:15:19 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 03:15:19 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r7}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r7}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r7}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x9, 0x8e63, 0x0, 0x948, 0x0, 0x1, {0x0, r7}}, 0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2832.611208] FAULT_INJECTION: forcing a failure. [ 2832.611208] name failslab, interval 1, probability 0, space 0, times 0 [ 2832.613033] CPU: 0 PID: 13874 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2832.613996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2832.615106] Call Trace: [ 2832.615472] dump_stack+0x107/0x167 [ 2832.615975] should_fail.cold+0x5/0xa [ 2832.616498] ? io_poll_remove_entries+0x30a/0x540 [ 2832.617172] ? create_object.isra.0+0x3a/0xa30 [ 2832.617798] should_failslab+0x5/0x20 [ 2832.618319] kmem_cache_alloc+0x5b/0x310 [ 2832.618881] create_object.isra.0+0x3a/0xa30 [ 2832.619484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2832.620186] kmem_cache_alloc_trace+0x151/0x320 [ 2832.620840] __io_queue_sqe+0x666/0x9d0 [ 2832.621392] ? io_issue_sqe+0x77d0/0x77d0 [ 2832.621955] ? __fget_files+0x2f8/0x520 [ 2832.622500] ? io_prep_rw+0x7f5/0x1050 [ 2832.623034] io_submit_sqes+0x44ab/0x8610 [ 2832.623614] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2832.624291] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2832.624961] ? find_held_lock+0x2c/0x110 [ 2832.625516] ? io_submit_sqes+0x8610/0x8610 [ 2832.626110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2832.626764] ? wait_for_completion_io+0x270/0x270 [ 2832.627427] ? rcu_read_lock_any_held+0x75/0xa0 [ 2832.628059] ? vfs_write+0x354/0xb10 [ 2832.628563] ? fput_many+0x2f/0x1a0 [ 2832.629070] ? ksys_write+0x1a9/0x260 [ 2832.629589] ? __ia32_sys_read+0xb0/0xb0 [ 2832.630142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2832.630859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2832.631562] do_syscall_64+0x33/0x40 [ 2832.632056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2832.632754] RIP: 0033:0x7f01ae28cb19 [ 2832.633271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2832.635772] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2832.636819] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2832.637787] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2832.638730] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2832.639701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2832.640656] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:15:20 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ff, 0x0, 0x0) 03:15:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) sendfile(r0, 0xffffffffffffffff, 0x0, 0x500000001) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x4, 0x7, 0x28, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7800, 0x3ff, 0x1}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000000240)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="ff070000000c00000100000000000000ff7f000000000000040000000000000001800000000000008507000000000000ffffff7f000000004a0f000000000000090000000000000001800000000000008fffffffffffffff06000000000000000800"/112]) 03:15:20 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a000000, 0x0, 0x0) 03:15:20 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000) 03:15:20 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfdef, 0x0, 0x0) 03:15:20 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2403, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48002) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:20 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfff5, 0x0, 0x0) 03:15:20 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 03:15:34 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000000000000) 03:15:34 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1}, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:34 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1800, 0x0, 0x0, 0x0) 03:15:34 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c000000, 0x0, 0x0) 03:15:34 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000, 0x0, 0x0) 03:15:34 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 03:15:34 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 03:15:34 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 03:15:34 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00000000000000) [ 2847.081680] FAULT_INJECTION: forcing a failure. [ 2847.081680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2847.083448] CPU: 1 PID: 13931 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2847.084369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2847.085488] Call Trace: [ 2847.085841] dump_stack+0x107/0x167 [ 2847.086329] should_fail.cold+0x5/0xa [ 2847.086838] _copy_from_user+0x2e/0x1b0 [ 2847.087358] iovec_from_user+0x141/0x400 [ 2847.087890] __import_iovec+0x67/0x590 [ 2847.088407] ? kfree+0xd7/0x340 [ 2847.088857] io_import_iovec+0x581/0x1120 [ 2847.089413] ? io_link_timeout_fn+0x20/0x380 [ 2847.089994] ? io_complete_rw+0x230/0x230 [ 2847.090543] ? io_clean_op+0x30c/0x870 [ 2847.091064] ? kiocb_done+0x16b/0xc90 [ 2847.091568] io_read+0xe14/0x11e0 [ 2847.092031] ? __lock_acquire+0x1657/0x5b00 [ 2847.092604] ? kiocb_done+0xc90/0xc90 [ 2847.093110] ? mark_lock+0xf5/0x2df0 [ 2847.093605] ? lock_chain_count+0x20/0x20 [ 2847.094151] ? __lock_acquire+0x1657/0x5b00 [ 2847.094724] ? mark_lock+0xf5/0x2df0 [ 2847.095213] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2847.095906] ? lock_chain_count+0x20/0x20 [ 2847.096457] ? __lock_acquire+0xbb1/0x5b00 [ 2847.097032] io_issue_sqe+0x2e8a/0x77d0 [ 2847.097556] ? find_held_lock+0x2c/0x110 [ 2847.098100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2847.098799] ? io_poll_remove_entries+0x30a/0x540 [ 2847.099449] ? io_connect+0x610/0x610 [ 2847.099948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2847.100639] ? lock_acquire+0x197/0x470 [ 2847.101170] ? find_held_lock+0x2c/0x110 [ 2847.101702] ? __fget_files+0x2cf/0x520 [ 2847.102232] ? lock_downgrade+0x6d0/0x6d0 [ 2847.102782] __io_queue_sqe+0x90/0x9d0 [ 2847.103313] ? io_issue_sqe+0x77d0/0x77d0 [ 2847.103855] ? __fget_files+0x2f8/0x520 [ 2847.104381] ? io_prep_rw+0x7f5/0x1050 [ 2847.104896] io_submit_sqes+0x44ab/0x8610 [ 2847.105463] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2847.106113] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2847.106742] ? find_held_lock+0x2c/0x110 [ 2847.107293] ? io_submit_sqes+0x8610/0x8610 [ 2847.107857] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2847.108495] ? wait_for_completion_io+0x270/0x270 [ 2847.109132] ? rcu_read_lock_any_held+0x75/0xa0 [ 2847.109747] ? vfs_write+0x354/0xb10 [ 2847.110240] ? fput_many+0x2f/0x1a0 [ 2847.110723] ? ksys_write+0x1a9/0x260 [ 2847.111225] ? __ia32_sys_read+0xb0/0xb0 [ 2847.111766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2847.112469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2847.113151] do_syscall_64+0x33/0x40 [ 2847.113637] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2847.114305] RIP: 0033:0x7f01ae28cb19 [ 2847.114786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2847.117215] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2847.118207] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2847.119132] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2847.120071] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.121034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2847.121971] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:15:34 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000, 0x0, 0x0) 03:15:34 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 03:15:34 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1200000000000000) 03:15:34 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1800000000000000) 03:15:34 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 03:15:34 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 03:15:34 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 03:15:34 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) sendfile(r0, r4, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:34 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e00000000000000) 03:15:35 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x1e00, 0x0, 0x0, 0x0) 03:15:35 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) r9 = geteuid() r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r10, 0x6, 0x0, &(0x7f0000000480), 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="c328aa54d227736fcd3f14772f450958a14a63bb2cbce263cbe038", 0x1b}, {&(0x7f0000000380)="c6a52c27467e84526c4825ce1251bf3cc565db16edf0532a1f68c48b278559010c77416fa1567180c7904fc5ac60a163eb52cc9f50de510085b68abeb05bd034134682003b60c1573a6e81670b3c83888b4cd575bd2ce04543adb979845a27303d244b0c2ee5455a14bd72dd76bd05972ca624862aab", 0x76}], 0x2, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9}}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r6, r10, r5]}}], 0x88, 0x20040000}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:35 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 03:15:35 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 03:15:35 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 03:15:35 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) 03:15:35 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) [ 2847.700044] FAULT_INJECTION: forcing a failure. [ 2847.700044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2847.701465] CPU: 1 PID: 13981 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2847.702244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2847.703178] Call Trace: [ 2847.703487] dump_stack+0x107/0x167 [ 2847.703910] should_fail.cold+0x5/0xa [ 2847.704354] _copy_to_iter+0x264/0x12d0 [ 2847.704812] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2847.705376] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2847.705944] ? __virt_addr_valid+0x170/0x5d0 [ 2847.706456] ? __check_object_size+0x319/0x440 [ 2847.706991] seq_read_iter+0xdcb/0x12b0 [ 2847.707451] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2847.708008] kernfs_fop_read_iter+0x456/0x5f0 [ 2847.708524] ? rw_verify_area+0x11d/0x350 [ 2847.709001] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2847.709563] io_read+0x2dc/0x11e0 [ 2847.709972] ? __lock_acquire+0x1657/0x5b00 [ 2847.710473] ? kiocb_done+0xc90/0xc90 [ 2847.710909] ? mark_lock+0xf5/0x2df0 [ 2847.711337] ? lock_chain_count+0x20/0x20 [ 2847.711809] ? __lock_acquire+0x1657/0x5b00 [ 2847.712318] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2847.712922] ? lock_chain_count+0x20/0x20 [ 2847.713426] ? __lock_acquire+0xbb1/0x5b00 [ 2847.713922] io_issue_sqe+0x2e8a/0x77d0 [ 2847.714386] ? find_held_lock+0x2c/0x110 [ 2847.714848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2847.715453] ? io_poll_remove_entries+0x30a/0x540 [ 2847.715997] ? io_connect+0x610/0x610 [ 2847.716437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2847.717059] ? lock_acquire+0x197/0x470 [ 2847.717508] ? find_held_lock+0x2c/0x110 [ 2847.717993] ? __fget_files+0x2cf/0x520 [ 2847.718450] ? lock_downgrade+0x6d0/0x6d0 [ 2847.718939] __io_queue_sqe+0x90/0x9d0 [ 2847.719385] ? io_issue_sqe+0x77d0/0x77d0 [ 2847.719861] ? __fget_files+0x2f8/0x520 [ 2847.720323] ? io_prep_rw+0x7f5/0x1050 [ 2847.720775] io_submit_sqes+0x44ab/0x8610 [ 2847.721282] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2847.721864] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2847.722414] ? find_held_lock+0x2c/0x110 [ 2847.722883] ? io_submit_sqes+0x8610/0x8610 [ 2847.723377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2847.723924] ? wait_for_completion_io+0x270/0x270 [ 2847.724485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2847.725019] ? vfs_write+0x354/0xb10 [ 2847.725446] ? fput_many+0x2f/0x1a0 [ 2847.725868] ? ksys_write+0x1a9/0x260 [ 2847.726307] ? __ia32_sys_read+0xb0/0xb0 [ 2847.726771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2847.727374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2847.727961] do_syscall_64+0x33/0x40 [ 2847.728385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2847.728989] RIP: 0033:0x7f01ae28cb19 [ 2847.729415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2847.731527] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2847.732399] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2847.733226] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2847.734036] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2847.734852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2847.735667] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:15:47 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 03:15:47 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 03:15:47 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 03:15:47 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 03:15:47 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0) 03:15:47 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2400000000000000) 03:15:47 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 03:15:47 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000300000006593a308b623fb0c3a0079220cb097c21545847334cbdd027b2424c3c7b0de691919f69586608d635ca780e9ef76c98bfa4846c25f5a900f6295df99a4711735407edfea92a500dc2622de0f69a0142d7b2af4b786ea736fee25475218d227351c01522bdb7716aa129747de77ebf67e921f99b629bc38d8dff753b19708466bdd48b7e682058e94cc73fbf562f380239dc2cba58895f6bfd587a4d634fd749d", @ANYRES32=r3, @ANYBLOB="05000000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf, 0xbc, 0x81, 0x8, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000280), 0x6}, 0x52009, 0x1, 0x5e26f956, 0x2, 0x4, 0x0, 0x81, 0x0, 0x3, 0x0, 0x7fff}, 0x0, 0xa, r7, 0x3) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r8, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r8, 0x21, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2860.103013] FAULT_INJECTION: forcing a failure. [ 2860.103013] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.105572] CPU: 1 PID: 14015 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2860.107023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.108754] Call Trace: [ 2860.109327] dump_stack+0x107/0x167 [ 2860.110091] should_fail.cold+0x5/0xa [ 2860.110894] ? io_setup_async_rw+0x180/0x580 [ 2860.111816] should_failslab+0x5/0x20 [ 2860.112612] __kmalloc+0x72/0x390 [ 2860.113354] io_setup_async_rw+0x180/0x580 [ 2860.114241] ? iov_iter_restore+0x195/0x3a0 [ 2860.115145] io_read+0x775/0x11e0 [ 2860.115879] ? __lock_acquire+0x1657/0x5b00 [ 2860.116789] ? kiocb_done+0xc90/0xc90 [ 2860.117614] ? mark_lock+0xf5/0x2df0 [ 2860.118407] ? lock_chain_count+0x20/0x20 [ 2860.119272] ? __lock_acquire+0x1657/0x5b00 [ 2860.120195] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2860.121306] ? lock_chain_count+0x20/0x20 [ 2860.122182] ? __lock_acquire+0xbb1/0x5b00 [ 2860.123070] io_issue_sqe+0x2e8a/0x77d0 [ 2860.123911] ? find_held_lock+0x2c/0x110 [ 2860.124760] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2860.125873] ? io_poll_remove_entries+0x30a/0x540 [ 2860.126889] ? io_connect+0x610/0x610 [ 2860.127686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.128790] ? lock_acquire+0x197/0x470 [ 2860.129628] ? find_held_lock+0x2c/0x110 [ 2860.130493] ? __fget_files+0x2cf/0x520 [ 2860.131326] ? lock_downgrade+0x6d0/0x6d0 [ 2860.132201] __io_queue_sqe+0x90/0x9d0 [ 2860.133021] ? io_issue_sqe+0x77d0/0x77d0 [ 2860.133897] ? __fget_files+0x2f8/0x520 [ 2860.134731] ? io_prep_rw+0x7f5/0x1050 [ 2860.135557] io_submit_sqes+0x44ab/0x8610 [ 2860.136449] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2860.137508] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2860.138519] ? find_held_lock+0x2c/0x110 [ 2860.139376] ? io_submit_sqes+0x8610/0x8610 [ 2860.140288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2860.141316] ? wait_for_completion_io+0x270/0x270 [ 2860.142340] ? rcu_read_lock_any_held+0x75/0xa0 [ 2860.143317] ? vfs_write+0x354/0xb10 [ 2860.144100] ? fput_many+0x2f/0x1a0 [ 2860.144861] ? ksys_write+0x1a9/0x260 [ 2860.145677] ? __ia32_sys_read+0xb0/0xb0 [ 2860.146528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.147626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.148704] do_syscall_64+0x33/0x40 [ 2860.149492] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.150559] RIP: 0033:0x7f01ae28cb19 [ 2860.151333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.155170] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2860.156755] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2860.158254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2860.159740] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.161238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.162731] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:15:47 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000, 0x0, 0x0) 03:15:47 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 03:15:47 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a00000000000000) 03:15:47 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) readv(r4, &(0x7f0000002740)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000015c0)=""/179, 0xb3}, {&(0x7f0000001680)=""/166, 0xa6}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/61, 0x3d}], 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:15:47 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000, 0x0, 0x0) 03:15:47 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000000000000) 03:16:00 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3600000000000000) 03:16:00 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0) 03:16:00 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) 03:16:00 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6, 0x0, 0x0) 03:16:00 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2400, 0x0, 0x0, 0x0) 03:16:00 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 03:16:00 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4800, 0x0, 0x0, 0x0) 03:16:00 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000480), 0x4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000000)={0xc, 0x0, 0x0, 0x0, 0xb, 0x0, 0x1, 0xae}) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000080)=r7) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000004c0)={{r3}, r7, 0xe, @unused=[0x8, 0x8000, 0x80000000, 0x5979], @subvolid=0x4}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400040, 0x132) [ 2873.399754] FAULT_INJECTION: forcing a failure. [ 2873.399754] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.402316] CPU: 1 PID: 14067 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2873.403809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.405589] Call Trace: [ 2873.406152] dump_stack+0x107/0x167 [ 2873.406917] should_fail.cold+0x5/0xa [ 2873.407739] ? io_setup_async_rw+0x180/0x580 [ 2873.408682] should_failslab+0x5/0x20 [ 2873.409509] __kmalloc+0x72/0x390 [ 2873.410259] io_setup_async_rw+0x180/0x580 [ 2873.411156] ? iov_iter_restore+0x195/0x3a0 [ 2873.412067] io_read+0x775/0x11e0 [ 2873.412812] ? __lock_acquire+0x1657/0x5b00 [ 2873.413728] ? kiocb_done+0xc90/0xc90 [ 2873.414521] ? mark_lock+0xf5/0x2df0 [ 2873.415309] ? lock_chain_count+0x20/0x20 [ 2873.416173] ? __lock_acquire+0x1657/0x5b00 [ 2873.417092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.418194] ? lock_chain_count+0x20/0x20 [ 2873.419070] ? __lock_acquire+0xbb1/0x5b00 [ 2873.419969] io_issue_sqe+0x2e8a/0x77d0 [ 2873.420803] ? find_held_lock+0x2c/0x110 [ 2873.421688] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2873.422817] ? io_poll_remove_entries+0x30a/0x540 [ 2873.423841] ? io_connect+0x610/0x610 [ 2873.424654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2873.425789] ? lock_acquire+0x197/0x470 [ 2873.426637] ? find_held_lock+0x2c/0x110 [ 2873.427518] ? __fget_files+0x2cf/0x520 [ 2873.428372] ? lock_downgrade+0x6d0/0x6d0 [ 2873.429266] __io_queue_sqe+0x90/0x9d0 [ 2873.430095] ? io_issue_sqe+0x77d0/0x77d0 [ 2873.430966] ? __fget_files+0x2f8/0x520 [ 2873.431824] ? io_prep_rw+0x7f5/0x1050 [ 2873.432666] io_submit_sqes+0x44ab/0x8610 [ 2873.433580] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2873.434645] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2873.435684] ? find_held_lock+0x2c/0x110 [ 2873.436533] ? io_submit_sqes+0x8610/0x8610 [ 2873.437479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2873.438515] ? wait_for_completion_io+0x270/0x270 [ 2873.439529] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.440499] ? vfs_write+0x354/0xb10 [ 2873.441307] ? fput_many+0x2f/0x1a0 [ 2873.442090] ? ksys_write+0x1a9/0x260 [ 2873.442887] ? __ia32_sys_read+0xb0/0xb0 [ 2873.443743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2873.444834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.445925] do_syscall_64+0x33/0x40 [ 2873.446701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.447766] RIP: 0033:0x7f01ae28cb19 [ 2873.448540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.452430] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2873.454028] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2873.455524] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2873.457013] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.458519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.460086] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:16:00 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 03:16:00 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3c00000000000000) 03:16:01 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000540)=@xdp, 0x0, 0x40000}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r4 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x9, 0x0, 0x6, 0x0, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x92, 0x38084, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) sendfile(r4, r6, &(0x7f0000000080)=0x20000000000000, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x810, r4, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:01 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7000000, 0x0, 0x0) 03:16:01 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000000, 0x0, 0x0) 03:16:01 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeffdffffffffffff) 03:16:01 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6b3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:01 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7, 0x0, 0x0) 03:16:01 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 03:16:01 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x2a00, 0x0, 0x0, 0x0) 03:16:01 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc000000, 0x0, 0x0) [ 2873.989595] FAULT_INJECTION: forcing a failure. [ 2873.989595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2873.992559] CPU: 1 PID: 14114 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2873.994023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.995757] Call Trace: [ 2873.996318] dump_stack+0x107/0x167 [ 2873.997087] should_fail.cold+0x5/0xa [ 2873.997912] _copy_to_iter+0x264/0x12d0 [ 2873.998758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2873.999769] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2874.000803] ? __virt_addr_valid+0x170/0x5d0 [ 2874.001724] ? __check_object_size+0x319/0x440 [ 2874.002695] seq_read_iter+0xdcb/0x12b0 [ 2874.003547] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2874.004565] kernfs_fop_read_iter+0x456/0x5f0 [ 2874.005504] ? rw_verify_area+0x11d/0x350 [ 2874.006360] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2874.007367] io_read+0x2dc/0x11e0 [ 2874.008207] ? __lock_acquire+0x1657/0x5b00 [ 2874.009106] ? kiocb_done+0xc90/0xc90 [ 2874.009907] ? mark_lock+0xf5/0x2df0 [ 2874.010685] ? lock_chain_count+0x20/0x20 [ 2874.011551] ? __lock_acquire+0x1657/0x5b00 [ 2874.012462] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2874.013566] ? lock_chain_count+0x20/0x20 [ 2874.014436] ? __lock_acquire+0xbb1/0x5b00 [ 2874.015314] io_issue_sqe+0x2e8a/0x77d0 [ 2874.016140] ? find_held_lock+0x2c/0x110 [ 2874.016983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2874.018093] ? io_poll_remove_entries+0x30a/0x540 [ 2874.019098] ? io_connect+0x610/0x610 [ 2874.019882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2874.020980] ? lock_acquire+0x197/0x470 [ 2874.021822] ? find_held_lock+0x2c/0x110 [ 2874.022674] ? __fget_files+0x2cf/0x520 [ 2874.023591] ? lock_downgrade+0x6d0/0x6d0 [ 2874.024471] __io_queue_sqe+0x90/0x9d0 [ 2874.025298] ? io_issue_sqe+0x77d0/0x77d0 [ 2874.026167] ? __fget_files+0x2f8/0x520 [ 2874.026993] ? io_prep_rw+0x7f5/0x1050 [ 2874.027820] io_submit_sqes+0x44ab/0x8610 [ 2874.028709] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2874.029758] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2874.030768] ? find_held_lock+0x2c/0x110 [ 2874.031613] ? io_submit_sqes+0x8610/0x8610 [ 2874.032507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2874.033526] ? wait_for_completion_io+0x270/0x270 [ 2874.034531] ? rcu_read_lock_any_held+0x75/0xa0 [ 2874.035510] ? vfs_write+0x354/0xb10 [ 2874.036285] ? fput_many+0x2f/0x1a0 [ 2874.037045] ? ksys_write+0x1a9/0x260 [ 2874.037844] ? __ia32_sys_read+0xb0/0xb0 [ 2874.038697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2874.039896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2874.040976] do_syscall_64+0x33/0x40 [ 2874.041760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2874.042840] RIP: 0033:0x7f01ae28cb19 [ 2874.043615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2874.047459] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2874.049023] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 03:16:01 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_setup(0x593f, &(0x7f0000000240)={0x0, 0x8a75, 0x10, 0x3, 0x33e}) io_uring_enter(r3, 0x58a9, 0x1, 0x1, 0x0, 0x0) [ 2874.050505] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2874.052169] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2874.053657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2874.055211] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:16:14 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 03:16:14 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3000, 0x0, 0x0, 0x0) 03:16:14 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c00, 0x0, 0x0, 0x0) 03:16:14 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x1010, r3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) signalfd4(r6, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) sendfile(r6, r4, &(0x7f0000000240)=0xc, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:14 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffffffffffff) 03:16:14 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12000000, 0x0, 0x0) 03:16:14 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 03:16:14 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) [ 2886.771978] FAULT_INJECTION: forcing a failure. [ 2886.771978] name failslab, interval 1, probability 0, space 0, times 0 [ 2886.775007] CPU: 0 PID: 14137 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2886.776486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.778296] Call Trace: [ 2886.778878] dump_stack+0x107/0x167 [ 2886.779647] should_fail.cold+0x5/0xa [ 2886.780471] ? io_poll_remove_entries+0x30a/0x540 [ 2886.781512] ? create_object.isra.0+0x3a/0xa30 [ 2886.782505] should_failslab+0x5/0x20 [ 2886.783322] kmem_cache_alloc+0x5b/0x310 [ 2886.784196] create_object.isra.0+0x3a/0xa30 [ 2886.785126] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2886.786222] kmem_cache_alloc_trace+0x151/0x320 [ 2886.787226] __io_queue_sqe+0x666/0x9d0 [ 2886.788084] ? io_issue_sqe+0x77d0/0x77d0 [ 2886.789004] ? __fget_files+0x2f8/0x520 [ 2886.789867] ? io_prep_rw+0x7f5/0x1050 [ 2886.790708] io_submit_sqes+0x44ab/0x8610 [ 2886.791623] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2886.792690] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2886.793742] ? find_held_lock+0x2c/0x110 [ 2886.794620] ? io_submit_sqes+0x8610/0x8610 [ 2886.795552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2886.796588] ? wait_for_completion_io+0x270/0x270 [ 2886.797638] ? rcu_read_lock_any_held+0x75/0xa0 [ 2886.798634] ? vfs_write+0x354/0xb10 [ 2886.799437] ? fput_many+0x2f/0x1a0 [ 2886.800220] ? ksys_write+0x1a9/0x260 [ 2886.801035] ? __ia32_sys_read+0xb0/0xb0 [ 2886.801924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2886.803077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2886.804212] do_syscall_64+0x33/0x40 [ 2886.805032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2886.806167] RIP: 0033:0x7f01ae28cb19 [ 2886.806981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.811011] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2886.812632] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2886.814164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2886.815685] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2886.817205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2886.818738] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2886.820733] hpet: Lost 2 RTC interrupts [ 2886.822489] audit: type=1400 audit(1757906174.193:14): avc: denied { map } for pid=14138 comm="syz-executor.5" path="pipe:[55872]" dev="pipefs" ino=55872 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 03:16:14 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6800, 0x0, 0x0, 0x0) 03:16:14 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:14 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18000000, 0x0, 0x0) 03:16:14 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc, 0x0, 0x0) 03:16:14 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e000000, 0x0, 0x0) 03:16:14 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r7}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r7}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r7}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000001540)=@IORING_OP_WRITEV={0x2, 0x5, 0x4004, @fd=r3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="8e7c597bc2e1967b7103b92a17ac6ebaf09ef671f33e7e6adc2be1b5ea279759d0dea3ff01184bf6a62941c64daff20f955d0b4ee3915511cc498321b1f3b99bbabcc9bbb29c05af67cc8321f08386458f1deb57f0f26c39b2ec4f9382f422fb9bbc8fdf34495a726bdd5f17ec999e135841155327089cb3561c8c670bd6e39d729520470570cad598a9ed387ee0f2c1116fcea9aac382e44345f6", 0x9b}, {&(0x7f0000000240)="9cd7d6f2ce74fe38f63c5fda022e190901e190243709959f0ecc44171c96aabf180b977db254b9f8701f75e4b665153b6b2e08e3bf65fb238943f7e4fbb7498646ad0dd47a5571e2c7836b746cad60e2", 0x50}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="15d3eb4ad4420ef3f924835bc011dff3120d0f9414979fd9e5c50b78321422589e5977a497402828b92cef507bded260da8ac6bf67c049b5061c5b1712a699fd3a40fc4134bb1847a7468910fb84b8d346885829b563cbf7", 0x58}], 0x4, 0x4, 0x0, {0x2, r7}}, 0xa35) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:14 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 03:16:14 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x7fffffff, 0x2000) io_uring_enter(r3, 0x5647, 0xeda2, 0x3, &(0x7f0000000280)={[0xffffffffffffff02]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:30 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 03:16:30 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3600, 0x0, 0x0, 0x0) 03:16:30 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24000000, 0x0, 0x0) 03:16:30 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) 03:16:30 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10, 0x0, 0x0) 03:16:30 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:30 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c00, 0x0, 0x0, 0x0) 03:16:30 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffdef) [ 2903.304484] FAULT_INJECTION: forcing a failure. [ 2903.304484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2903.307418] CPU: 0 PID: 14205 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2903.308885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2903.310662] Call Trace: [ 2903.311229] dump_stack+0x107/0x167 [ 2903.311994] should_fail.cold+0x5/0xa [ 2903.312806] _copy_from_user+0x2e/0x1b0 [ 2903.313660] iovec_from_user+0x141/0x400 [ 2903.314513] __import_iovec+0x67/0x590 [ 2903.315327] ? kfree+0xd7/0x340 [ 2903.316026] io_import_iovec+0x581/0x1120 [ 2903.316899] ? io_link_timeout_fn+0x20/0x380 [ 2903.317846] ? io_complete_rw+0x230/0x230 [ 2903.318733] ? io_clean_op+0x30c/0x870 [ 2903.319555] ? kiocb_done+0x16b/0xc90 [ 2903.320372] io_read+0xe14/0x11e0 [ 2903.321112] ? __lock_acquire+0x1657/0x5b00 [ 2903.322035] ? kiocb_done+0xc90/0xc90 [ 2903.322842] ? mark_lock+0xf5/0x2df0 [ 2903.323639] ? lock_chain_count+0x20/0x20 [ 2903.324504] ? __lock_acquire+0x1657/0x5b00 [ 2903.325420] ? mark_lock+0xf5/0x2df0 [ 2903.326222] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2903.327326] ? lock_chain_count+0x20/0x20 [ 2903.328216] ? __lock_acquire+0xbb1/0x5b00 [ 2903.329110] io_issue_sqe+0x2e8a/0x77d0 [ 2903.329949] ? find_held_lock+0x2c/0x110 [ 2903.330795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2903.331885] ? io_poll_remove_entries+0x30a/0x540 [ 2903.332920] ? io_connect+0x610/0x610 [ 2903.333725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2903.334822] ? lock_acquire+0x197/0x470 [ 2903.335645] ? find_held_lock+0x2c/0x110 [ 2903.336509] ? __fget_files+0x2cf/0x520 [ 2903.337340] ? lock_downgrade+0x6d0/0x6d0 [ 2903.338221] __io_queue_sqe+0x90/0x9d0 [ 2903.339044] ? io_issue_sqe+0x77d0/0x77d0 [ 2903.339915] ? __fget_files+0x2f8/0x520 [ 2903.340766] ? io_prep_rw+0x7f5/0x1050 [ 2903.341626] io_submit_sqes+0x44ab/0x8610 [ 2903.342533] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2903.343583] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2903.344887] ? find_held_lock+0x2c/0x110 [ 2903.346008] ? io_submit_sqes+0x8610/0x8610 [ 2903.347190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2903.348514] ? wait_for_completion_io+0x270/0x270 [ 2903.349834] ? rcu_read_lock_any_held+0x75/0xa0 [ 2903.350937] ? vfs_write+0x354/0xb10 [ 2903.351751] ? fput_many+0x2f/0x1a0 [ 2903.352573] ? ksys_write+0x1a9/0x260 [ 2903.353484] ? __ia32_sys_read+0xb0/0xb0 [ 2903.354416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2903.355598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2903.356707] do_syscall_64+0x33/0x40 [ 2903.357497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2903.358614] RIP: 0033:0x7f01ae28cb19 [ 2903.359388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2903.363272] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2903.364884] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2903.366406] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2903.367901] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2903.369416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2903.370939] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2903.372803] hpet: Lost 3 RTC interrupts 03:16:30 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:30 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x12, 0x0, 0x0) 03:16:43 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 03:16:43 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a000000, 0x0, 0x0) 03:16:43 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7400, 0x0, 0x0, 0x0) 03:16:43 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) dup(r0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {r4, r5/1000+60000}}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:43 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffff5) 03:16:43 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x18, 0x0, 0x0) 03:16:43 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x3c00, 0x0, 0x0, 0x0) 03:16:43 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) [ 2915.827814] FAULT_INJECTION: forcing a failure. [ 2915.827814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2915.830640] CPU: 0 PID: 14237 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2915.832131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.833925] Call Trace: [ 2915.834506] dump_stack+0x107/0x167 [ 2915.835316] should_fail.cold+0x5/0xa [ 2915.836180] _copy_from_user+0x2e/0x1b0 [ 2915.837034] iovec_from_user+0x141/0x400 [ 2915.837921] __import_iovec+0x67/0x590 [ 2915.838765] ? kfree+0xd7/0x340 [ 2915.839490] io_import_iovec+0x581/0x1120 [ 2915.840374] ? io_link_timeout_fn+0x20/0x380 [ 2915.841327] ? io_complete_rw+0x230/0x230 [ 2915.842221] ? io_clean_op+0x30c/0x870 [ 2915.843064] ? kiocb_done+0x16b/0xc90 [ 2915.843891] io_read+0xe14/0x11e0 [ 2915.844647] ? __lock_acquire+0x1657/0x5b00 [ 2915.845576] ? kiocb_done+0xc90/0xc90 [ 2915.846406] ? mark_lock+0xf5/0x2df0 [ 2915.847210] ? lock_chain_count+0x20/0x20 [ 2915.848099] ? __lock_acquire+0x1657/0x5b00 [ 2915.849031] ? mark_lock+0xf5/0x2df0 [ 2915.849839] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2915.850962] ? lock_chain_count+0x20/0x20 [ 2915.851864] ? __lock_acquire+0xbb1/0x5b00 [ 2915.852776] io_issue_sqe+0x2e8a/0x77d0 [ 2915.853633] ? find_held_lock+0x2c/0x110 [ 2915.854514] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2915.855644] ? io_poll_remove_entries+0x30a/0x540 [ 2915.856678] ? io_connect+0x610/0x610 [ 2915.857496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.858632] ? lock_acquire+0x197/0x470 [ 2915.859484] ? find_held_lock+0x2c/0x110 [ 2915.860365] ? __fget_files+0x2cf/0x520 [ 2915.861218] ? lock_downgrade+0x6d0/0x6d0 [ 2915.862121] __io_queue_sqe+0x90/0x9d0 [ 2915.862967] ? io_issue_sqe+0x77d0/0x77d0 [ 2915.863852] ? __fget_files+0x2f8/0x520 [ 2915.864712] ? io_prep_rw+0x7f5/0x1050 [ 2915.865553] io_submit_sqes+0x44ab/0x8610 [ 2915.866481] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2915.867556] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2915.868595] ? find_held_lock+0x2c/0x110 [ 2915.869471] ? io_submit_sqes+0x8610/0x8610 [ 2915.870419] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2915.871463] ? wait_for_completion_io+0x270/0x270 [ 2915.872502] ? rcu_read_lock_any_held+0x75/0xa0 [ 2915.873507] ? vfs_write+0x354/0xb10 [ 2915.874312] ? fput_many+0x2f/0x1a0 [ 2915.875097] ? ksys_write+0x1a9/0x260 [ 2915.875914] ? __ia32_sys_read+0xb0/0xb0 [ 2915.876795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.877937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.879049] do_syscall_64+0x33/0x40 [ 2915.879849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.880952] RIP: 0033:0x7f01ae28cb19 [ 2915.881763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.885729] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2915.887378] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2915.888909] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2915.890449] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2915.891981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2915.893520] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2915.895435] hpet: Lost 3 RTC interrupts 03:16:43 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) 03:16:43 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30000000, 0x0, 0x0) 03:16:43 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e, 0x0, 0x0) 03:16:43 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r6, 0xffffffffffffffff, 0x0, 0x500000001) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:43 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36000000, 0x0, 0x0) 03:16:58 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x300000000000000, 0x0, 0x0) 03:16:58 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4000, @fd_index, 0x3, &(0x7f0000000340)=""/141, 0x8d, 0x1, 0x0, {0x0, r3}}, 0x7ff) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r6}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r6}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r6}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x8, 0x1ff, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xa6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:58 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4800, 0x0, 0x0, 0x0) 03:16:58 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 03:16:58 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c000000, 0x0, 0x0) 03:16:58 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r5) sendfile(r4, r5, &(0x7f0000000080)=0x20000000000000, 0x3) syz_io_uring_setup(0x7b44, &(0x7f0000000240)={0x0, 0xd9f6, 0x10, 0x1000000, 0x182, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:58 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a00, 0x0, 0x0, 0x0) 03:16:58 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x24, 0x0, 0x0) [ 2931.025573] FAULT_INJECTION: forcing a failure. [ 2931.025573] name failslab, interval 1, probability 0, space 0, times 0 [ 2931.028412] CPU: 0 PID: 14295 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2931.029944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2931.031760] Call Trace: [ 2931.032343] dump_stack+0x107/0x167 [ 2931.033142] should_fail.cold+0x5/0xa [ 2931.033987] ? io_setup_async_rw+0x180/0x580 [ 2931.034943] should_failslab+0x5/0x20 [ 2931.035771] __kmalloc+0x72/0x390 [ 2931.036536] io_setup_async_rw+0x180/0x580 [ 2931.037454] ? iov_iter_restore+0x195/0x3a0 [ 2931.038399] io_read+0x775/0x11e0 [ 2931.039158] ? __lock_acquire+0x1657/0x5b00 [ 2931.040145] ? kiocb_done+0xc90/0xc90 [ 2931.040972] ? mark_lock+0xf5/0x2df0 [ 2931.041793] ? lock_chain_count+0x20/0x20 [ 2931.042705] ? __lock_acquire+0x1657/0x5b00 [ 2931.043656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2931.044791] ? lock_chain_count+0x20/0x20 [ 2931.045702] ? __lock_acquire+0xbb1/0x5b00 [ 2931.046633] io_issue_sqe+0x2e8a/0x77d0 [ 2931.047498] ? find_held_lock+0x2c/0x110 [ 2931.048378] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2931.049516] ? io_poll_remove_entries+0x30a/0x540 [ 2931.050564] ? io_connect+0x610/0x610 [ 2931.051388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2931.052533] ? lock_acquire+0x197/0x470 [ 2931.053396] ? find_held_lock+0x2c/0x110 [ 2931.054290] ? __fget_files+0x2cf/0x520 [ 2931.055153] ? lock_downgrade+0x6d0/0x6d0 [ 2931.056057] __io_queue_sqe+0x90/0x9d0 [ 2931.056907] ? io_issue_sqe+0x77d0/0x77d0 [ 2931.057798] ? __fget_files+0x2f8/0x520 [ 2931.058673] ? io_prep_rw+0x7f5/0x1050 [ 2931.059522] io_submit_sqes+0x44ab/0x8610 [ 2931.060447] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2931.061527] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2931.062583] ? find_held_lock+0x2c/0x110 [ 2931.063469] ? io_submit_sqes+0x8610/0x8610 [ 2931.064412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2931.065456] ? wait_for_completion_io+0x270/0x270 [ 2931.066507] ? rcu_read_lock_any_held+0x75/0xa0 [ 2931.067513] ? vfs_write+0x354/0xb10 [ 2931.068317] ? fput_many+0x2f/0x1a0 [ 2931.069105] ? ksys_write+0x1a9/0x260 [ 2931.069939] ? __ia32_sys_read+0xb0/0xb0 [ 2931.070826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2931.071956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2931.073079] do_syscall_64+0x33/0x40 [ 2931.073888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2931.075003] RIP: 0033:0x7f01ae28cb19 [ 2931.075808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2931.079816] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2931.081461] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2931.083024] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2931.084568] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2931.086121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2931.087660] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2931.089453] hpet: Lost 3 RTC interrupts 03:16:58 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2a, 0x0, 0x0) 03:16:58 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x48000000, 0x0, 0x0) 03:16:58 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x30, 0x0, 0x0) 03:16:58 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) r3 = syz_io_uring_setup(0xfffffffe, 0x0, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) syz_io_uring_setup(0x61c7, &(0x7f0000000540)={0x0, 0x4fac, 0x4, 0x0, 0xf7, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_io_uring_setup(0x35c2, &(0x7f00000003c0)={0x0, 0x111e, 0x8, 0x1, 0x1c, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f00000004c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) pidfd_open(r9, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x1, 0x4a, 0x6, 0xd3, 0x0, 0xa5b, 0x40000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xcc, 0x1, @perf_config_ext={0x5, 0xb4c}, 0x480a5, 0x1, 0x4e, 0x3, 0x1, 0x1, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff}, r9, 0x9, r6, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:16:58 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c000000, 0x0, 0x0) 03:16:58 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x80000d, 0x30, r3, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r5, &(0x7f0000000240)={0x2001, 0x20, 0x14}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x10000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fule0\x00']) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:12 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x36, 0x0, 0x0) 03:17:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x4000010, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x4010, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:12 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 03:17:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = syz_io_uring_setup(0x3ecc, &(0x7f0000000240)={0x0, 0xc7b9, 0x0, 0x3, 0x237, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r5}}, 0x1600000) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x145000, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r6, &(0x7f0000000540)=0x80, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x0, 0x800, 0x1, {0x0, r7}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r5}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r5}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(r4, r1, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index=0x1, 0x5, &(0x7f00000003c0)="7dcb8b0d82a300303086d97fb7991668a2cf8274bb51245ca9fdb52d1ebb563986fca5222ef835d1872407b54eed10ab80632d21e09b6367d517a28300a5b4871df5cb99a2f26d0c23038ef1f35bc64842d08fcefbcd5ddc6aa39ab2662c9c14724e7014d9657a228e96f3541c08377845a0873872c8229c533b8c8bb73ac6abf45e239b8b8d3ce8317281d380d68e5e75919782dd4afadf24857fd12657021d2ff0db09a3def224023b65c5b0ae97a4e524bef7d4d96fab5d06c53a1334", 0xbe, 0xd, 0x0, {0x0, r5}}, 0x9) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x401, 0x0, 0x7, 0x1, 0x1}, 0x54a2) 03:17:12 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c00, 0x0, 0x0, 0x0) 03:17:12 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000000000000, 0x0, 0x0) 03:17:12 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x68000000, 0x0, 0x0) 03:17:12 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x4c00, 0x0, 0x0, 0x0) [ 2945.281127] FAULT_INJECTION: forcing a failure. [ 2945.281127] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.283906] CPU: 1 PID: 14339 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2945.285366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.287122] Call Trace: [ 2945.287679] dump_stack+0x107/0x167 [ 2945.288442] should_fail.cold+0x5/0xa [ 2945.289247] ? io_setup_async_rw+0x180/0x580 [ 2945.290330] should_failslab+0x5/0x20 [ 2945.291129] __kmalloc+0x72/0x390 [ 2945.291854] io_setup_async_rw+0x180/0x580 [ 2945.292742] ? iov_iter_restore+0x195/0x3a0 [ 2945.293646] io_read+0x775/0x11e0 [ 2945.294400] ? __lock_acquire+0x1657/0x5b00 [ 2945.295330] ? kiocb_done+0xc90/0xc90 [ 2945.296122] ? mark_lock+0xf5/0x2df0 [ 2945.296918] ? lock_chain_count+0x20/0x20 [ 2945.297781] ? __lock_acquire+0x1657/0x5b00 [ 2945.298730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2945.299819] ? lock_chain_count+0x20/0x20 [ 2945.300696] ? __lock_acquire+0xbb1/0x5b00 [ 2945.301589] io_issue_sqe+0x2e8a/0x77d0 [ 2945.302438] ? find_held_lock+0x2c/0x110 [ 2945.303294] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2945.304399] ? io_poll_remove_entries+0x30a/0x540 [ 2945.305509] ? io_connect+0x610/0x610 [ 2945.306339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.307450] ? lock_acquire+0x197/0x470 [ 2945.308271] ? find_held_lock+0x2c/0x110 [ 2945.309122] ? __fget_files+0x2cf/0x520 [ 2945.309941] ? lock_downgrade+0x6d0/0x6d0 [ 2945.310830] __io_queue_sqe+0x90/0x9d0 [ 2945.311649] ? io_issue_sqe+0x77d0/0x77d0 [ 2945.312510] ? __fget_files+0x2f8/0x520 [ 2945.313356] ? io_prep_rw+0x7f5/0x1050 [ 2945.314179] io_submit_sqes+0x44ab/0x8610 [ 2945.315071] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2945.316120] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2945.317126] ? find_held_lock+0x2c/0x110 [ 2945.317983] ? io_submit_sqes+0x8610/0x8610 [ 2945.318892] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2945.319910] ? wait_for_completion_io+0x270/0x270 [ 2945.321020] ? rcu_read_lock_any_held+0x75/0xa0 [ 2945.321997] ? vfs_write+0x354/0xb10 [ 2945.322802] ? fput_many+0x2f/0x1a0 [ 2945.323572] ? ksys_write+0x1a9/0x260 [ 2945.324383] ? __ia32_sys_read+0xb0/0xb0 [ 2945.325231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.326363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.327442] do_syscall_64+0x33/0x40 [ 2945.328230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.329305] RIP: 0033:0x7f01ae28cb19 [ 2945.330103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.333968] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2945.335573] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2945.337223] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2945.338721] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2945.340208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.341697] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:17:12 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c000000, 0x0, 0x0) 03:17:12 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x3c, 0x0, 0x0) 03:17:12 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x490e, &(0x7f0000000240)={0x0, 0x1c57, 0x0, 0x3, 0x20, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x200}}, 0x26) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:12 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f, 0x0, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) openat(r6, &(0x7f0000000340)='./file0\x00', 0xa800, 0x82) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x110, r5, 0x8000000) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:12 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x74000000, 0x0, 0x0) 03:17:13 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x48, 0x0, 0x0) 03:17:13 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) socketpair(0xa, 0xa, 0x3, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000340)=""/151, 0x97}) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:13 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6800, 0x0, 0x0, 0x0) 03:17:13 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fcntl$getflags(r3, 0xb) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) listen(r4, 0x1db) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r6 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11214, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) sendfile(r6, r8, &(0x7f0000000080)=0x20000000000000, 0x3) io_uring_enter(r6, 0x58a6, 0x9784, 0x2, 0x0, 0x0) 03:17:26 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 03:17:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x4c, 0x0, 0x0) 03:17:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r7}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r7}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r7}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0xa003}, 0x1, {0x0, r7}}, 0xc7c1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r8}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r8}}, 0x10000) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/200, 0xc8}], 0x2, &(0x7f0000000640)=""/92, 0xffffff7a}, 0x0, 0x40000002, 0x1, {0x2}}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:26 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x6c00, 0x0, 0x0, 0x0) 03:17:26 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x0) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r6, &(0x7f0000000240)={{0x107, 0x9, 0x5, 0x1ee, 0x299, 0x96, 0x29, 0x8}, "e9b9070720a1855ee4c197faf98234371d65d1225f10203ee9987184de9866b331b82a0a6ce4b7d00e03db59f4ca8ae3f1ec82aa423e9011e28d7aa15d684ae77e445969d2ff87aacfab3b14b73c57b76bc2549e8a"}, 0x75) 03:17:26 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) 03:17:26 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 03:17:26 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a000000, 0x0, 0x0) [ 2958.929903] FAULT_INJECTION: forcing a failure. [ 2958.929903] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:17:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x68, 0x0, 0x0) [ 2958.932838] CPU: 0 PID: 14411 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2958.934432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.936170] Call Trace: [ 2958.936739] dump_stack+0x107/0x167 [ 2958.937512] should_fail.cold+0x5/0xa [ 2958.938327] _copy_to_iter+0x264/0x12d0 [ 2958.939170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2958.940178] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2958.941206] ? __virt_addr_valid+0x170/0x5d0 [ 2958.942120] ? __check_object_size+0x319/0x440 [ 2958.943083] seq_read_iter+0xdcb/0x12b0 [ 2958.943926] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2958.944945] kernfs_fop_read_iter+0x456/0x5f0 [ 2958.945878] ? rw_verify_area+0x11d/0x350 [ 2958.946785] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 2958.947800] io_read+0x2dc/0x11e0 [ 2958.948533] ? __lock_acquire+0x1657/0x5b00 [ 2958.949441] ? kiocb_done+0xc90/0xc90 [ 2958.950242] ? mark_lock+0xf5/0x2df0 [ 2958.951018] ? lock_chain_count+0x20/0x20 [ 2958.951882] ? __lock_acquire+0x1657/0x5b00 [ 2958.952807] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2958.953902] ? lock_chain_count+0x20/0x20 [ 2958.954775] ? __lock_acquire+0xbb1/0x5b00 [ 2958.955667] io_issue_sqe+0x2e8a/0x77d0 [ 2958.956514] ? find_held_lock+0x2c/0x110 [ 2958.957376] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2958.958471] ? io_poll_remove_entries+0x30a/0x540 [ 2958.959481] ? io_connect+0x610/0x610 [ 2958.960416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.961717] ? lock_acquire+0x197/0x470 [ 2958.962718] ? find_held_lock+0x2c/0x110 [ 2958.963723] ? __fget_files+0x2cf/0x520 [ 2958.964695] ? lock_downgrade+0x6d0/0x6d0 [ 2958.965729] __io_queue_sqe+0x90/0x9d0 [ 2958.966698] ? io_issue_sqe+0x77d0/0x77d0 [ 2958.967722] ? __fget_files+0x2f8/0x520 [ 2958.968702] ? io_prep_rw+0x7f5/0x1050 [ 2958.969667] io_submit_sqes+0x44ab/0x8610 [ 2958.970731] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2958.971955] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2958.973149] ? find_held_lock+0x2c/0x110 [ 2958.974150] ? io_submit_sqes+0x8610/0x8610 [ 2958.975223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2958.976419] ? wait_for_completion_io+0x270/0x270 [ 2958.977657] ? rcu_read_lock_any_held+0x75/0xa0 [ 2958.978826] ? vfs_write+0x354/0xb10 [ 2958.979744] ? fput_many+0x2f/0x1a0 [ 2958.980640] ? ksys_write+0x1a9/0x260 [ 2958.981698] ? __ia32_sys_read+0xb0/0xb0 [ 2958.983024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.984704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.986363] do_syscall_64+0x33/0x40 [ 2958.987556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.989191] RIP: 0033:0x7f01ae28cb19 [ 2958.990401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:17:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r6}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r6}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r6}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000002a80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r5, 0x0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/228, 0xe4}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/92, 0x5c}, {&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000001740)=""/170, 0xaa}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000001800)=""/89, 0x59}, {&(0x7f0000001880)=""/209, 0xd1}], 0xa, &(0x7f0000001a40)=""/4096, 0x1000}, 0x0, 0x2002, 0x1, {0x0, r6}}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) sendto$unix(r4, &(0x7f0000000240), 0x0, 0x4010, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2958.995457] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2958.997523] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2958.999329] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2959.001192] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2959.002990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2959.004759] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2959.006979] hpet: Lost 3 RTC interrupts 03:17:26 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c000000, 0x0, 0x0) 03:17:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x6c, 0x0, 0x0) 03:17:26 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x13, r3, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1}, 0x7) 03:17:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000340)={0x0, 0xf86a, 0x24}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:26 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 03:17:26 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x74, 0x0, 0x0) 03:17:26 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/2194], 0x892) 03:17:26 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) 03:17:26 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xeffdffff, 0x0, 0x0) 03:17:40 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) recvmmsg(r2, &(0x7f00000030c0)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000800)=""/73, 0x49}, {&(0x7f0000000880)=""/74, 0x4a}, {&(0x7f0000000900)=""/79, 0x4f}], 0xa, &(0x7f0000000a40)=""/234, 0xea}, 0x7}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000002000)=[{&(0x7f0000000bc0)=""/69, 0x45}, {&(0x7f0000000c40)=""/229, 0xe5}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000d40)=""/121, 0x79}, {&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/117, 0x75}, {&(0x7f0000000e80)=""/137, 0x89}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/156, 0x9c}], 0x9, &(0x7f00000020c0)=""/138, 0x8a}, 0x80000001}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)=""/102, 0x66}, {&(0x7f0000002200)=""/231, 0xe7}, {&(0x7f0000002300)=""/135, 0x87}], 0x3}, 0xff}, {{&(0x7f0000002400)=@xdp, 0x80, &(0x7f0000002600)=[{&(0x7f0000002480)=""/64, 0x40}, {&(0x7f00000024c0)=""/33, 0x21}, {&(0x7f0000002500)=""/24, 0x18}, {&(0x7f0000002540)=""/133, 0x85}], 0x4, &(0x7f0000002640)=""/138, 0x8a}, 0x9}, {{&(0x7f0000002700)=@phonet, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002780)=""/151, 0x97}, {&(0x7f0000002840)=""/212, 0xd4}, {&(0x7f0000002940)=""/173, 0xad}], 0x3, &(0x7f0000002a40)=""/48, 0x30}, 0xfffffc01}, {{&(0x7f0000002a80)=@alg, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/12, 0xc}], 0x1, &(0x7f0000002b80)=""/167, 0xa7}, 0x975}, {{&(0x7f0000002c40)=@qipcrtr, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002cc0)=""/175, 0xaf}, {&(0x7f0000002d80)=""/21, 0x15}, {&(0x7f0000002dc0)=""/150, 0x96}, {&(0x7f0000002e80)=""/176, 0xb0}, {&(0x7f0000002f40)=""/103, 0x67}], 0x5, &(0x7f0000003040)=""/120, 0x78}, 0x5}], 0x7, 0x40002102, &(0x7f0000003280)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:40 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x700000000000000, 0x0, 0x0) 03:17:40 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6004, @fd=r0, 0x4, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(r5, r6, &(0x7f0000000080)=0x20000000000000, 0x3) syz_io_uring_setup(0x2441, &(0x7f0000000340)={0x0, 0xfd0, 0x8, 0x2, 0x27c, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/mipi-dsi', 0x101000, 0x13c) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r3, 0x617d, 0xe748, 0x0, 0x0, 0x0) 03:17:40 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 03:17:40 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) 03:17:40 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 03:17:40 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7400, 0x0, 0x0, 0x0) 03:17:40 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x7a, 0x0, 0x0) [ 2972.984972] FAULT_INJECTION: forcing a failure. [ 2972.984972] name failslab, interval 1, probability 0, space 0, times 0 [ 2972.987804] CPU: 0 PID: 14478 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2972.989367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2972.991248] Call Trace: [ 2972.991848] dump_stack+0x107/0x167 [ 2972.992669] should_fail.cold+0x5/0xa [ 2972.993562] ? io_poll_remove_entries+0x30a/0x540 [ 2972.994657] ? create_object.isra.0+0x3a/0xa30 [ 2972.995689] should_failslab+0x5/0x20 [ 2972.996544] kmem_cache_alloc+0x5b/0x310 [ 2972.997473] create_object.isra.0+0x3a/0xa30 [ 2972.998465] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2972.999615] kmem_cache_alloc_trace+0x151/0x320 [ 2973.000664] ? lock_downgrade+0x6d0/0x6d0 [ 2973.001602] __io_queue_sqe+0x666/0x9d0 [ 2973.002508] ? io_issue_sqe+0x77d0/0x77d0 [ 2973.003443] ? __fget_files+0x2f8/0x520 [ 2973.004345] ? io_prep_rw+0x7f5/0x1050 [ 2973.005231] io_submit_sqes+0x44ab/0x8610 [ 2973.006193] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2973.007320] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2973.008399] ? find_held_lock+0x2c/0x110 [ 2973.009312] ? io_submit_sqes+0x8610/0x8610 [ 2973.010285] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2973.011379] ? wait_for_completion_io+0x270/0x270 [ 2973.012460] ? rcu_read_lock_any_held+0x75/0xa0 [ 2973.013505] ? vfs_write+0x354/0xb10 [ 2973.014346] ? fput_many+0x2f/0x1a0 [ 2973.015175] ? ksys_write+0x1a9/0x260 [ 2973.016034] ? __ia32_sys_read+0xb0/0xb0 [ 2973.016953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2973.018130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2973.019306] do_syscall_64+0x33/0x40 [ 2973.020143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2973.021304] RIP: 0033:0x7f01ae28cb19 [ 2973.022141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2973.026306] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2973.028028] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2973.029629] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2973.031240] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2973.032839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2973.034448] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2973.036395] hpet: Lost 2 RTC interrupts 03:17:40 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffdef, 0x0, 0x0) 03:17:40 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1, 0x0, 0x0) 03:17:40 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8c, 0x0, 0x0) 03:17:40 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6c9c, &(0x7f0000000340)={0x0, 0x9e2c, 0x2, 0x2, 0x69, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r8}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r8}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r8}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x15, 0x1, {0x0, r8}}, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:40 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) 03:17:40 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5, 0x0, 0x0) 03:17:40 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x7a00, 0x0, 0x0, 0x0) 03:17:54 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r3 = syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x110, r3, 0x8000000) syz_io_uring_setup(0x1d28, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000280)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:54 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x8c00, 0x0, 0x0, 0x0) 03:17:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000240)={0x0, 0x675f, 0x0, 0x2, 0x23b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:54 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x300, 0x0, 0x0) 03:17:54 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 03:17:54 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00000000000000, 0x0, 0x0) 03:17:54 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 03:17:54 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) [ 2987.200598] FAULT_INJECTION: forcing a failure. [ 2987.200598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2987.203174] CPU: 0 PID: 14541 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 2987.204613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2987.206340] Call Trace: [ 2987.206903] dump_stack+0x107/0x167 [ 2987.207662] should_fail.cold+0x5/0xa [ 2987.208460] _copy_from_user+0x2e/0x1b0 [ 2987.209282] iovec_from_user+0x141/0x400 [ 2987.210127] __import_iovec+0x67/0x590 [ 2987.210950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2987.212091] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2987.213247] io_import_iovec+0x581/0x1120 [ 2987.214132] ? io_complete_rw+0x230/0x230 [ 2987.215020] ? io_clean_op+0x30c/0x870 [ 2987.215840] ? kiocb_done+0x16b/0xc90 [ 2987.216644] io_read+0xe14/0x11e0 [ 2987.217379] ? __lock_acquire+0x1657/0x5b00 [ 2987.218288] ? kiocb_done+0xc90/0xc90 [ 2987.219095] ? mark_lock+0xf5/0x2df0 [ 2987.219891] ? lock_chain_count+0x20/0x20 [ 2987.220765] ? __lock_acquire+0x1657/0x5b00 [ 2987.221687] ? mark_lock+0xf5/0x2df0 [ 2987.222474] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2987.223576] ? lock_chain_count+0x20/0x20 [ 2987.224456] ? __lock_acquire+0xbb1/0x5b00 [ 2987.225352] io_issue_sqe+0x2e8a/0x77d0 [ 2987.226188] ? find_held_lock+0x2c/0x110 [ 2987.227052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2987.228157] ? io_poll_remove_entries+0x30a/0x540 [ 2987.229164] ? io_connect+0x610/0x610 [ 2987.229962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2987.231076] ? lock_acquire+0x197/0x470 [ 2987.231904] ? find_held_lock+0x2c/0x110 [ 2987.232763] ? __fget_files+0x2cf/0x520 [ 2987.233598] ? lock_downgrade+0x6d0/0x6d0 [ 2987.234467] __io_queue_sqe+0x90/0x9d0 [ 2987.235299] ? io_issue_sqe+0x77d0/0x77d0 [ 2987.236169] ? __fget_files+0x2f8/0x520 [ 2987.237001] ? io_prep_rw+0x7f5/0x1050 [ 2987.237822] io_submit_sqes+0x44ab/0x8610 [ 2987.238731] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2987.239768] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2987.240785] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2987.241916] ? io_submit_sqes+0x8610/0x8610 [ 2987.242832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2987.243843] ? vfs_write+0x88b/0xb10 [ 2987.244618] ? vfs_write+0x5cc/0xb10 [ 2987.245400] ? wait_for_completion_io+0x270/0x270 [ 2987.246409] ? rcu_read_lock_any_held+0x75/0xa0 [ 2987.247385] ? vfs_write+0x354/0xb10 [ 2987.248165] ? fput_many+0x2f/0x1a0 [ 2987.248927] ? ksys_write+0x1a9/0x260 [ 2987.249732] ? __ia32_sys_read+0xb0/0xb0 [ 2987.250595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2987.251695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2987.252778] do_syscall_64+0x33/0x40 [ 2987.253555] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2987.254639] RIP: 0033:0x7f01ae28cb19 [ 2987.255416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2987.259265] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2987.260851] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 2987.262351] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2987.263862] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 2987.265358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2987.266854] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 2987.268851] hpet: Lost 3 RTC interrupts 03:17:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000002500)=[{&(0x7f0000000340)="131d41d69291be258c2233ad051d284da70fb9a2ce39f6c1c9ef4982dbd56aecafff5efa16bc3a50eaf2996a9770c133a01469bd319fce2a35d8d72e0d3b35697cc18cadb287f36de042ba22e662b6c85bba6b49db7278c2cf25093703f1b78305c1e144db5d81638dbb6d1dcd8d79615daa02c7c3337f1e8c1b4b85ec910dfefd4809fab62d3d02646cd47645fdb21b3fcae9bef19df0ba", 0x98}, {&(0x7f0000000240)="cf85c53329236889e8cfaa0c3aa6866df107fbadf75548d1503978fa86a93f6837cb89f73d07f70f8bdfaf236b53fa24668b920519226afe427672dc24a6c8950298f3a09251e4e9fb447b90a5bd6b8d37942c2c0112a4b3deef88ce82a6ed11b0", 0x61}, {&(0x7f0000000400)="272a1f32e993ec6491d9689b5e369d5ecad023d7cc6620edea54a6c8f17b38e48c3b592568b93e9ead0d445aa99768bbc8408e1892066f9d84", 0x39}, {&(0x7f0000000440)="3e88f90bfb789a8d0484e2f4b9b771c86670f3ec", 0x14}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="be2977a72b62344656ee5cf2990f34a9659de6feb892f6a0c032", 0x1a}, {&(0x7f0000001500)="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", 0x1000}], 0x7, 0x3) 03:17:54 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) 03:17:54 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000440)={{0xf0, 0x6}, {0x6, 0x100}, 0x9}) r1 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) r4 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x4f60, &(0x7f0000000240)={0x0, 0x9f34, 0x4, 0x0, 0x71, 0x0, r4}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f00009a3000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x90) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:17:54 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x600, 0x0, 0x0) 03:17:54 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xeffd, 0x0, 0x0, 0x0) 03:17:54 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4a9f, &(0x7f0000000340)={0x0, 0x86bd, 0x0, 0x0, 0x33b, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000040)=0x8, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000180000067ba4b5ab5cb72e9c29a47e", @ANYRES32=r5, @ANYBLOB="02000000000000002e2f6669ff013000"]) sendfile(r8, r9, &(0x7f0000000280)=0x8ba, 0x2) 03:18:09 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x700, 0x0, 0x0) 03:18:09 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r4, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r4, 0x21, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000240)={'veth1_vlan\x00', {0x2, 0x0, @private}}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:18:09 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xf5ff, 0x0, 0x0, 0x0) 03:18:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000001b80)={0x16a4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0xab, 0x3, "30f283729467c28061eea3760ee8a10ba64fce9c1f9ab988f21af6801d3fe9fdd2a276f68e654d45834f021904dfdff7becaf5a7b0af4e027c12611adbd5c59aa61f289936ad47f564ab95bd7ecaf24ce4ebcf779313bebed9ee6242c7436b4ae0b5553eaad6dfe3a512a3fd4fac86cb1ad1e7f0adb504d60824d94bc4198c0c02cf1deab7cfd4ad2f50c6cef08f267cbe0007c8a6a63d5bc54e0c6acd5e8f882562513e0c0ee2"}, @ETHTOOL_A_WOL_MODES={0x2cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'U<'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b60}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\x04\a\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "105621389af92653b6c3e8cb44648ee5782deaa412f0fd8db1e5621ddb0a459ac2ebc61fb67c61023f6b57532b7b12ac98fcd63e40af9a71ae0509ef3d0e5946869996aec4c847603fc09c235550217659ead32068dfc7039d70a87584b42a9a3ae1c0bdec0aaa90f9114ef1aa5dbc103ee4073c81669f84cdb9b600f8e0218f6a832f6048e22a5a1f68449d0ac01f25460343f4039b93b62939df3bd5ee112936a2a4790d777f5ffe825986437c9f52e06a46e75bf316c49db30216244a37755ab85de9c8078ae792ac476093d2c6d5cff2eb9211ee1154f5dd92dc51f4aadf620eb7fb5ee3c8fd49d64914"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff2255}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'U<'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\xc8\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'U<'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0x10b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "d183497fbced1381b1a17c44b60c2737c7907b855a509b9c51798abbd1324dbc4487aa1d4f7ac3c79b8342be981767a55cd457e139594ebdd7a11ef6c7caf5e1d3a4191854e918fc4b10fc7ca1cb2d7322fb00728b9915cc79d32f24794634613220fb0990ada1781a368ba957c825fdd78a3245432da02bc685e4e6c3ad8a869e09ed3cc43e92c76fbbfe4d38ca9d463ceb223ac12306c84fcd30dbf52fa15ba45da2fd594571ecf90110d8"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "faed0385101a0fda1a048646d57f28e67187f19652c47560d5cb186ddd3d2113ccddb602d07df414343341ed73b188cf4a767ce8c74980a3b1ff8826274e9e5f1e1d683ebe6a78c8b058f9652264646367d44a838fa1e5ae7cbc13c5acf0e53e8c9c44d1afce115d2279341c999c7ed7f54589e5b7cb969098ad2bdaa938f6eae14289dd5c921ab57b7ffd8ce402cc7beeccc7f51e2a7bfe82148c49f32a2511085f36185c04a006453141d9e94007bda10f83ec938e3f76dc2763b38fbc000a781827ae2ee9bb774c3d7fe075d58060681bd47afa641d744679f1907bff2543938a91e95620499f6d8612520d55b25a6187b1b69f983379e985486608128acbad8b03073db2da1de0cf8f4aa8999f41905ca8c4c9257b595a05cd1e5c7f71dad631b49f86429e4392f9bd78d2f5dc138899ad206f1c09911678b7a497e5f9ff8ed3c1674446f477f33eb94c343647d434cf76e6497c14300d5afd0e7b9fa438588f677b43d954233d9fa5f6c3b2382eed629da77e61140e1c8fc1239c896c03b3ee8563c50e929a9dc3adc5b86fbea71284c95eca07f461afe54c599cf189e1b010843961e3a93d5937bd60f6c4ae6f91c44d4a990ea61d4bfb3d6810b0d08343fc601e89e507c931ae5ab170d444ab28c792eb76c96cfe35e455e685d1a9d742a2752338d1053b6a0d43e7714ea43e5ce773a9e6a131451b0f5140c63051b2cced20c782196b629d63cc7cc83a3385d53e38a48058e866c63798b5477f24d187d38948ef8faa60401eb257a4fb895f169b704766f5fd9c90cbc45bbe0fe1ff4d4abcb3e9bfe93a6d0ba858003b439bfce81933543d480450760a1cde428f42c13855860158562f3494a0d38da48616c04925b93fb83a2aee560d8233e5c6040ba4646e24737549425d7c34d42559b7792fd64dac46b1449a26e9d41356ceddc47ac388c943cfa5b9a84b6ebd0154f0b5fb9414db479125f96dfd6951db033a0cd596fc18ab6bc8967f17d7048f88c6c8cce118e92075a0765d8903e967be25eeb1a5ee7d917ee87d337139e9514d98a40a98944eb4d08850f65736119760ac9e9200d0ae86a776775ce83a80ceedf3c24fdab455c18f488a01175b39c945ab9dfced668d3bcf34a446170d8ac7e08ded5c4e83ac0c04f1da32ae2e57c93f1ce9a785c668b0946a22a21dd1b170694386ff005c4b1c39d3bfb572b16b8a07f027ffef57e52e5b28d4e0c0b2b67e841f9e69fd1eac7db2b13402b3fd53ff7e5d4874e9acfcdefbcc24accee07810f84e9db8c4d48a2e058cc2fa02131acd24e88b3b971b94a0bea58254721e0b5b2a03ac3b610c04de73ddffb7b6c60e6239ac7f1d77d7ee306acec59e63c11c8a0af19da97d155e2dba885757a3b46171923cb44e2fa6267cbb136323224173a70ed0aab80f70f672f22dcdca8c0e2a7232fea92844f977f7f129c00d574efbbf07f171ebdc9adf55a3f372b5c4f8eb505130ef226e63995c8ac1f7e4b2872f7d756d722fe8632ffa390519f92d9cde349f2330637f8755b2486fff1e19207dfb089c035d516b6899f5b07974e2e40102233630a7c68375b77fd6368b313aeb9e0fdd2f5fa46fafcd9522606c950832da4f0cf328b2ecad56ddf3cfe75a57f9dc5f94f9b8bc4fa1f97a8c97e8088cef591046995a6cae93736972976a53024f5d6920d0a46eeb59dca50e1b8d7051619b9deb3c01c262655b0da872a08a446a9479f9f6a5d7b690285a5824d32197a6e28e15950217a188d477fde6d48c77d9ba290c6b8a9bdcedd7c055394df835974185d34b6e40d8b3c617acd518394a0f7f63e8f93d3d1f40081deb97bd77a92afefa13c707e8f5454b1d3a72898cc98874161afdd03a58840ffd011f80e89befeda3631e181e65f5aee3b7388b3316ee2bcd432dc8f7cd3c253b986656542ab8dda7a62f042e00f2100f6d0d62ae62b3eff5e5860b5b1b4405ff09d84ee76a03304aadd91cc532ab7e023968777920d012683d6942ac5ff9b247b7257e15b12139f8483c7e7e24ff36649d2eb5b9b9fd589c96459ab6b7cbcc4728270a1bbe8d574e9020c0fb541ab40579eedc3f27cfe6bb3b5539206edf180d41ab259ddd43e8f2c16edf51d3958bf47e05f3b399a89e312cce5ad7a2d08e6039f7e8e7a645fea2b44803a62f7cab7c43a9ac6b0490c145310fac7b45b627a317648cdf47ad482ce30570152b50aad7e28afb7e933334ef98bd441c462300d37591153eed3a1ab0ca682d7760d43f22602541c15b43febe4e1c2d8814d8e7dbb081c5995e892129766c71c16fc52d4ffba6bda550eabfcf18920b9e0e5596038122d15a9ab30520e507f46ef578cfc6f7ed8ad616e7789dbddcc27ff52ce5841c3396145755703598a1e8c90212412146d53f9f92ac2ad5fca68eeae7bef5e7de11109abbbb208fcd3e0c1d2c6e4aa37db45844075d9d347df0c530aa22b0d765e584e572011ff3ae640826cdc5bd0cdd29057d97b9a37deb792a2ff3cd10188c660d7fa2f2b8e5cb863a086a153900f7a34aea3603af1f7358b7efff0c22ba98d01afecda02ead8233d20fe1a0c3d016b7efd14adc26422388dc27a553aa03fcb5ab922475c24a859ad4e5a41a9afdb94a1d8d18a864271c550409643894945cad1e77599dc8d209bc5c063bdaef94b1c9ba10a8deed0923b3a9910277e219e6b91d67cf4ee4d3961f7a01e35973d0750bae9be20ec91f1db5424cf20475d1e677d526c5048adcbcd5fb2774a30f9cbda767ad028322b3636099b606284ed9879d2a69577054d00400d58eddf7cd63f440c0734dabb10515d89a2762316e537bcc9bc34837a74a0e99b6f7db2925ea40dc5ea4b5846a5d5cf010681f7f0c74315b3eb69ed0b2ecba69f84f2f2a32ad464220c67dfb8f4f2b653df2d4375c622801bf09788e51403f33540b09b4119ba8741041cdb35b6903bc5340eef9ae057b3b55cd1533cee8b002dab0bc31482908ef69443bc3a7ee18df7177b6327ad3f5a131c3d3164b18701ffb338610b4d83e091923081be3fae1b537a1bc637e07f93ea902bdf10ad00f94c8d5e1ac4fc5a3e138b19a043e7c90da3cc125e42ce9628b4a9cd5fdbf94884a2da2213227d6f62739316ac4c2d8f8e95d10005c7fc01e8240c53623ad9820d422087b34784a8045427a54163f6c63109ee3e473fa4f85c59b5b2652cb960d09478fa031f8654106a2b2aac1d56427d019ac24c0ad411dd6f1b6f925ba02fe45ba137a60a1534a70fad163c8a6ae924854df0d251111bf57dddc829d8a5d8d37836a611edada168046c66715c2cf300563fe2eba8b77802d5a8243eda609ce0be22105ac058b2e80b8ed87b8b1ba62db32cd7ecd49d590166f0c37f4a9727553e8dc8def337277408c68c78235be71270efb40a8ca4da95907e7c336c8652eb3c41842803394bfe80ff4dee4332e59ecbb6e288bb04b7b4e745d275c4ec31765c0e0dbbfe2e6337f1862453a25dbea8c5492dbb5c78484159f93ce3396cc9555f099ebf0f1308ad893e8a3232dd04bca6625805e4d5e039eac12c938ead68cde12823c5744705b34607e6af072e84c4f563a941502dfdd172d68b6359e913a22f88e4f345d6ae88483f3391cd91d6397fbc13bc93a28f074da5141b799abaf68d731d7db88055280ca2a8734a39f36275fe59ccf7256a6b2448ffe0e5fd068e7fc3f2853a4cb54dfd20f07ad4a03fadf7301a1122137e66d3757be39a46b245a2a61f7b07a8f18b0dded08c743d4d7b245bc13ea515b74374904f619c375f2c53318af514373c1b99ad59b1e9fcc2182f4b312f086afd015b52427adcce431349d789f71b5b83be493b021ce4b67a289dc76135693d7886443ec79905295fae6c0daa28f8e058d9e38a7aeb12e7881ccf7adfd69f7eb6f34db50d9aef43c64149f47d2cf23f0403c4f471607b57ab1c99f37676940a7fba6d1367c2984fa337af2776cbcebf9061748982c790e967b9733f8ebcef47bed284ab917e6b4faf286a077f5b313ba6d33ef2e688124fdbc4e4bbba5d12b0dcaeddbf07d52cbb0a97eb7ff179435b45d4964ee50d47387a082932000d594c1a14596cc35c1af4948b5f2ee6242656ba8e13f9b2064e837b4783a388608c13ae6f58d608a9225d10b5b1da6dbeec468dcbbfeb01ab8e8f47a55c461d23bc9c4a01b3cddc242276ed703a4fa5f187cb52f88023ddcd9682ebf63021b45e84645ceabf0cba4ca40c0ba8b65696646c90b1815cd0b6faf4fc4bc09e100826ddc375e9585fbdd77175c2b46e4392e30feb7d37e28b9350ddc4d292082c8d3821b9e3fb59976a464cacddf71a97af74950732714091670a1046f87880ccd2d3340700ea5aa17cbc245a3eb6c311ee8ddff7f548011eedd45b7ffc458ab20d5421216581a45b8675258b1dbced08813ea4187412b6c46e0f03b18ff00b84c151a7312cc8bb11a24ee66aeaa9810e3545d407c462539cfe80fdf12e144762eb79c6b56e083338152b90f979f8caa11130e0e14bab12015942d325bf96a41b9764e446b1a204afdbf7a8951db7794ecb477061da4722b448a0d45224d4b05460c804f632367e0c07681458c89eac5f9cbc0785ff5ac98f892e89e1873ff487953b7a13e42611ac4243224418af0229152c6e09ef0f96a20197d4338df20faf62ab4dfcecc89a3506701f10d82c699213a883a5783d365bb45efcb6d56bbe8bdd18a20d9d86b0082a6c337ff554762af5dbb39ce0e464d58c9f93ac76fe2192e87dfc86eb32fd1ea9cd1821c1464a07deff9335353a8615bc01dcd097a7a0538f253913d2d1262e86f65eb6f92f277250801147a291423dd943285e146dd91fbb249d82ea590df51b69c09d19881bb6be1ca56d889cfb19c0377b7cbe5eb484fe33f1cd90196a29e6860dedcd9b06a594eab02a2b57e0e9bd133012ad36f9894c24939a8623a3f61063a568dd7403a678971ecf844630200255eb8f905c4224c028dfb5f54830c238bb7b9aa7490a62367181f7dfa4012347c0d279f974f51f5cc1b8b81ba2dd62c6341eb1b3c831a590ea76a0f57cfc68029cf30b07184e1df0a81cd0902739e0a8586af86f8bc254e039b9538eea5766f32f688f4083748e51c3af2986393422acfe056660d541c475f86969beddce906f8791fab3d962d74ff0b977308ec1e05c08aeaac7a24f5fd8142c7b8513629d38a74d472f79fbfa55949712220d42ceea0d9d6714d77fb79d9b1c92daeb67fbc966e9cce2a44a191aef4e1aff2ce8819ee5b28929ab6735b3a25c65e046edc838ea378dedc92fc7f73c2bece2d6699338a37e1abc3e452edf203c67fce9b0a2770e54d37d14e6ef103f4c8cc7b78e455ba35f65786afd6365b11a1b5117598a050be13b215b5491c72ac83399e443dd2ae065e02172c3b066cd33830f3e671613aa863396641c926da5e0a8e7737903d016e5cb99b367eada083e0c3b59a6c30f2249e238640357806a5d9d89a08699ba2573812e42bc89aacfcd9e391ceb45ca713193586084b47fc3f546325902c5108e987a272d7b867fd3a621b466ea764f48bf8406863e1c787a21c9f2352b9cf97c2732ab95a4e1d6092187f696e2cf6e7daa1455466a68359a1207d5d80a11c8e198ab033cbc1918be1473457542a4836bc64a30da0ee65aecb62f37167574ce87a130bd054b80580873ce8e350442d660f18278854e00437cb316b10adedc1c37ab7e6b88dba50bc5acd519c2d14e7cc7101dc42ceffb97577eaa34cb31300012f9bed63"}]}, @ETHTOOL_A_WOL_SOPASS={0x49, 0x3, "ce68483b63417a7356a0564ce12946856ede0e584b6bf83a5603a2bf4911e645753c18ec3e6f87142b275c93161929387e9c45d31a5d7283c2a625ed2aed022c1041ccae9e"}, @ETHTOOL_A_WOL_MODES={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "4f9b768249ef695ec894f3df71901c1b3eeaee1508438baf00a20335d4b13e2aa84e054158a6f5bd3eb5d88981d762ffa97de7eab3418a3c560017bec83a0e82fcff0b44f75da5aa1a3b00608265901cb024d4585b70bf860bdd2c470535ea14062f7973ca4dc3d733827a4cef436959df43945515349ed8fd41c4f95df2c7ef59aecce240c49bca22f59d84780a6e36fb5325120ccbe46a826f849c42c2c0ee885ffb8bd47e65197eca247f07a5abe6d7d382484c56365ee182a43df2eb1df8fbeb5a869abd26009d8266e1323fa8cd004900b6"}, @ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "704c419c3069126830b4fc6fbe94b516228e894af45a230d849407"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x16a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000051) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:18:09 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 03:18:09 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200000000000000, 0x0, 0x0) 03:18:09 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0) 03:18:09 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) [ 3002.461556] FAULT_INJECTION: forcing a failure. [ 3002.461556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3002.464522] CPU: 0 PID: 14591 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 3002.465974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3002.467740] Call Trace: [ 3002.468304] dump_stack+0x107/0x167 [ 3002.469085] should_fail.cold+0x5/0xa [ 3002.469894] _copy_to_iter+0x264/0x12d0 [ 3002.470752] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3002.471776] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3002.472832] ? __virt_addr_valid+0x170/0x5d0 [ 3002.473771] ? __check_object_size+0x319/0x440 [ 3002.474744] seq_read_iter+0xdcb/0x12b0 [ 3002.475595] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 3002.476623] kernfs_fop_read_iter+0x456/0x5f0 [ 3002.477570] ? rw_verify_area+0x11d/0x350 [ 3002.478487] ? kernfs_vma_page_mkwrite+0x240/0x240 [ 3002.479544] io_read+0x2dc/0x11e0 [ 3002.480282] ? __lock_acquire+0x1657/0x5b00 [ 3002.481205] ? kiocb_done+0xc90/0xc90 [ 3002.482014] ? mark_lock+0xf5/0x2df0 [ 3002.482819] ? lock_chain_count+0x20/0x20 [ 3002.483703] ? __lock_acquire+0x1657/0x5b00 [ 3002.484642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3002.485765] ? lock_chain_count+0x20/0x20 [ 3002.486658] ? __lock_acquire+0xbb1/0x5b00 [ 3002.487578] io_issue_sqe+0x2e8a/0x77d0 [ 3002.488420] ? find_held_lock+0x2c/0x110 [ 3002.489278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3002.490379] ? io_poll_remove_entries+0x30a/0x540 [ 3002.491412] ? io_connect+0x610/0x610 [ 3002.492218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3002.493337] ? lock_acquire+0x197/0x470 [ 3002.494183] ? find_held_lock+0x2c/0x110 [ 3002.495077] ? __fget_files+0x2cf/0x520 [ 3002.495930] ? lock_downgrade+0x6d0/0x6d0 [ 3002.496820] __io_queue_sqe+0x90/0x9d0 [ 3002.497658] ? io_issue_sqe+0x77d0/0x77d0 [ 3002.498538] ? __fget_files+0x2f8/0x520 [ 3002.499404] ? io_prep_rw+0x7f5/0x1050 [ 3002.500225] io_submit_sqes+0x44ab/0x8610 [ 3002.501120] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3002.502164] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3002.503188] ? find_held_lock+0x2c/0x110 [ 3002.504145] ? io_submit_sqes+0x8610/0x8610 [ 3002.505254] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3002.506464] ? wait_for_completion_io+0x270/0x270 [ 3002.507682] ? rcu_read_lock_any_held+0x75/0xa0 [ 3002.508850] ? vfs_write+0x354/0xb10 [ 3002.509784] ? fput_many+0x2f/0x1a0 [ 3002.510701] ? ksys_write+0x1a9/0x260 [ 3002.511660] ? __ia32_sys_read+0xb0/0xb0 [ 3002.512684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3002.513981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3002.515294] do_syscall_64+0x33/0x40 [ 3002.516228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3002.517520] RIP: 0033:0x7f01ae28cb19 [ 3002.518451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3002.523080] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3002.524986] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 3002.526775] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3002.528566] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3002.530358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3002.532163] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 [ 3002.534348] hpet: Lost 3 RTC interrupts 03:18:09 executing program 2: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) nanosleep(&(0x7f0000000400)={0x77359400}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x33ed, &(0x7f0000000240)={0x0, 0x8852, 0x20, 0x1, 0x19e, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe}, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4004, @fd=r3, 0x93, 0x6, 0xffff5000, 0x8}, 0x2) 03:18:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0xc00, 0x0, 0x0) 03:18:10 executing program 5: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x3, 0x5, {}, 0xca, 0x2, 0x1, {0x0, r3}}, 0x1600000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x4, 0x0, {0x0, r3}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r3}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, {0x103, r3}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:18:10 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfdef, 0x0, 0x0, 0x0) 03:18:10 executing program 4: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000400)=0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r5, 0x21, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000002, 0x0, {0x2}}, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x100000, 0x0, 0x0, 0x0) 03:18:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1200, 0x0, 0x0) 03:18:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800, 0x0, 0x0) 03:18:10 executing program 6: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000000, 0x0, 0x0) 03:18:10 executing program 7: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1800000000000000, 0x0, 0x0) 03:18:10 executing program 0: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0xfff5, 0x0, 0x0, 0x0) 03:18:10 executing program 3: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) [ 3003.213496] FAULT_INJECTION: forcing a failure. [ 3003.213496] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.215458] CPU: 1 PID: 14642 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 3003.216585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3003.217928] Call Trace: [ 3003.218344] dump_stack+0x107/0x167 [ 3003.218932] should_fail.cold+0x5/0xa [ 3003.219526] ? io_poll_remove_entries+0x30a/0x540 [ 3003.220283] ? create_object.isra.0+0x3a/0xa30 [ 3003.220990] should_failslab+0x5/0x20 [ 3003.221587] kmem_cache_alloc+0x5b/0x310 [ 3003.222241] create_object.isra.0+0x3a/0xa30 [ 3003.222962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3003.223788] kmem_cache_alloc_trace+0x151/0x320 [ 3003.224537] ? lock_downgrade+0x6d0/0x6d0 [ 3003.225207] __io_queue_sqe+0x666/0x9d0 [ 3003.225848] ? io_issue_sqe+0x77d0/0x77d0 [ 3003.226516] ? __fget_files+0x2f8/0x520 [ 3003.227163] ? io_prep_rw+0x7f5/0x1050 [ 3003.227887] io_submit_sqes+0x44ab/0x8610 [ 3003.228578] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3003.229388] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3003.230159] ? find_held_lock+0x2c/0x110 [ 3003.230831] ? io_submit_sqes+0x8610/0x8610 [ 3003.231550] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3003.232324] ? wait_for_completion_io+0x270/0x270 [ 3003.233096] ? rcu_read_lock_any_held+0x75/0xa0 [ 3003.233849] ? vfs_write+0x354/0xb10 [ 3003.234432] ? fput_many+0x2f/0x1a0 [ 3003.235026] ? ksys_write+0x1a9/0x260 [ 3003.235634] ? __ia32_sys_read+0xb0/0xb0 [ 3003.236295] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3003.237138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3003.237965] do_syscall_64+0x33/0x40 [ 3003.238573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3003.239397] RIP: 0033:0x7f01ae28cb19 [ 3003.239985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3003.242972] RSP: 002b:00007f01ab802188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3003.244304] RAX: ffffffffffffffda RBX: 00007f01ae39ff60 RCX: 00007f01ae28cb19 [ 3003.245450] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3003.246597] RBP: 00007f01ab8021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3003.247734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3003.248868] R13: 00007fffe8fd960f R14: 00007f01ab802300 R15: 0000000000022000 03:18:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x1e00, 0x0, 0x0) 03:18:10 executing program 1: r0 = syz_io_uring_setup(0x5e85, &(0x7f0000000180)={0x0, 0x675f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x48001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 3016.150426] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3016.151757] CPU: 0 PID: 6249 Comm: syz-fuzzer Not tainted 5.10.244 #1 [ 3016.152490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3016.153428] Call Trace: [ 3016.153731] dump_stack+0x107/0x167 [ 3016.154150] dump_header+0x107/0x689 [ 3016.154577] oom_kill_process.cold+0x10/0x15 [ 3016.155082] out_of_memory+0x1149/0x1440 [ 3016.155548] ? oom_killer_disable+0x280/0x280 [ 3016.156053] ? mutex_trylock+0x237/0x2b0 [ 3016.156508] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3016.157180] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3016.157843] ? lock_acquire+0x107/0x470 [ 3016.158294] ? warn_alloc+0x190/0x190 [ 3016.158735] __alloc_pages_nodemask+0x51d/0x600 [ 3016.159268] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3016.159943] ? find_get_entry+0x2c8/0x740 [ 3016.160416] alloc_pages_current+0x187/0x280 [ 3016.160909] __page_cache_alloc+0x2d2/0x360 [ 3016.161397] pagecache_get_page+0x2c7/0xc80 [ 3016.161891] filemap_fault+0x177d/0x2210 [ 3016.162359] ? read_cache_page_gfp+0x30/0x30 [ 3016.162858] ? replace_page_cache_page+0x1200/0x1200 [ 3016.163436] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3016.164033] ext4_filemap_fault+0x87/0xc0 [ 3016.164498] __do_fault+0x113/0x410 [ 3016.164917] handle_mm_fault+0x1e53/0x3500 [ 3016.165434] ? ep_read_events_proc+0x3d0/0x3d0 [ 3016.165945] ? __pmd_alloc+0x630/0x630 [ 3016.166391] ? vmacache_find+0x55/0x2a0 [ 3016.166837] ? vmacache_update+0xce/0x140 [ 3016.167326] do_user_addr_fault+0x56e/0xc60 [ 3016.167816] exc_page_fault+0xa2/0x1a0 [ 3016.168254] ? asm_exc_page_fault+0x8/0x30 [ 3016.168734] asm_exc_page_fault+0x1e/0x30 [ 3016.169198] RIP: 0033:0x4666e0 [ 3016.169567] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 3016.170258] RSP: 002b:000000c00045d7f0 EFLAGS: 00010246 [ 3016.170868] RAX: 0000000000000000 RBX: 00000000000003e3 RCX: 00000000004666e0 [ 3016.171687] RDX: 0000000000000080 RSI: 000000c00045d840 RDI: 0000000000000003 [ 3016.172488] RBP: 000000c00045de40 R08: 0000000000000000 R09: 0000000000000000 [ 3016.173294] R10: 00000000000003e3 R11: 0000000000000246 R12: 0000000000000003 [ 3016.174095] R13: 000000c0037b2480 R14: 000002bdca6976d1 R15: 000000000000f468 [ 3016.175119] Mem-Info: [ 3016.175416] active_anon:10869 inactive_anon:55969 isolated_anon:0 [ 3016.175416] active_file:4 inactive_file:4 isolated_file:0 [ 3016.175416] unevictable:0 dirty:0 writeback:0 [ 3016.175416] slab_reclaimable:8717 slab_unreclaimable:257622 [ 3016.175416] mapped:69634 shmem:115 pagetables:1384 bounce:0 [ 3016.175416] free:2769 free_pcp:252 free_cma:0 [ 3016.178943] Node 0 active_anon:43476kB inactive_anon:223876kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:460kB writeback_tmp:0kB kernel_stack:4096kB all_unreclaimable? yes [ 3016.181670] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3016.184603] lowmem_reserve[]: 0 1616 1616 1616 [ 3016.185155] Node 0 DMA32 free:4592kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:43476kB inactive_anon:223876kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:5536kB bounce:0kB free_pcp:1008kB local_pcp:692kB free_cma:0kB [ 3016.188389] lowmem_reserve[]: 0 0 0 0 [ 3016.188838] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6476kB [ 3016.190413] Node 0 DMA32: 474*4kB (UM) 131*8kB (UM) 77*16kB (UME) 13*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4592kB [ 3016.191986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3016.192947] 125 total pagecache pages [ 3016.193389] 0 pages in swap cache [ 3016.193776] Swap cache stats: add 0, delete 0, find 0/0 [ 3016.194389] Free swap = 0kB [ 3016.194727] Total swap = 0kB [ 3016.195094] 524158 pages RAM [ 3016.195434] 0 pages HighMem/MovableOnly [ 3016.195876] 105069 pages reserved [ 3016.196340] Unreclaimable slab info: [ 3016.197061] Name Used Total [ 3016.197712] pid_3 3KB 3KB [ 3016.198329] pid_2 71KB 71KB [ 3016.198934] IEEE-802.15.4-MAC 63KB 63KB [ 3016.199552] p9_req_t 4KB 4KB [ 3016.200166] fib6_nodes 28KB 28KB [ 3016.200763] ip6_dst_cache 45KB 45KB [ 3016.201377] PINGv6 31KB 31KB [ 3016.201996] RAWv6 220KB 220KB [ 3016.202620] UDPLITEv6 62KB 62KB [ 3016.203241] UDPv6 62KB 62KB [ 3016.203839] tw_sock_TCPv6 15KB 15KB [ 3016.204456] TCPv6 62KB 62KB [ 3016.205075] scsi_sense_cache 8KB 8KB [ 3016.205677] sd_ext_cdb 3KB 3KB [ 3016.206291] virtio_scsi_cmd 16KB 16KB [ 3016.206897] sgpool-128 59KB 59KB [ 3016.207513] sgpool-64 63KB 63KB [ 3016.208129] sgpool-32 63KB 63KB [ 3016.208725] sgpool-16 75KB 75KB [ 3016.209343] sgpool-8 23KB 30KB [ 3016.209941] io_kiocb 137KB 150KB [ 3016.210560] mqueue_inode_cache 62KB 62KB [ 3016.211188] nfs_commit_data 15KB 15KB [ 3016.211786] nfs_write_data 47KB 47KB [ 3016.212527] jbd2_inode 7KB 7KB [ 3016.213155] ext4_system_zone 3KB 3KB [ 3016.213752] ext4_io_end_vec 7KB 7KB [ 3016.214377] ext4_bio_post_read_ctx 15KB 15KB [ 3016.215053] kioctx 31KB 31KB [ 3016.215649] aio_kiocb 7KB 7KB [ 3016.216266] bio-2 4KB 4KB [ 3016.216865] fasync_cache 7KB 7KB [ 3016.217484] pid_namespace 7KB 7KB [ 3016.218105] posix_timers_cache 15KB 15KB [ 3016.218725] rpc_buffers 31KB 31KB [ 3016.219353] rpc_tasks 3KB 3KB [ 3016.219951] UNIX 260KB 416KB [ 3016.220570] UDP-Lite 63KB 63KB [ 3016.221185] tcp_bind_bucket 8KB 8KB [ 3016.221791] ip_fib_trie 8KB 8KB [ 3016.222406] ip_fib_alias 15KB 15KB [ 3016.223014] ip_dst_cache 40KB 40KB [ 3016.223632] PING 62KB 62KB [ 3016.224247] RAW 62KB 62KB [ 3016.224849] UDP 283KB 283KB [ 3016.225463] request_sock_TCP 7KB 7KB [ 3016.226077] TCP 60KB 60KB [ 3016.226674] hugetlbfs_inode_cache 30KB 30KB [ 3016.227335] bio-1 11KB 11KB [ 3016.228086] eventpoll_pwq 19KB 19KB [ 3016.228686] eventpoll_epi 47KB 47KB [ 3016.229305] inotify_inode_mark 66KB 66KB [ 3016.229910] request_queue 60KB 60KB [ 3016.230533] blkdev_ioc 18KB 18KB [ 3016.231163] bio-0 92KB 92KB [ 3016.231763] biovec-max 1071KB 1071KB [ 3016.232381] biovec-64 126KB 189KB [ 3016.232980] biovec-16 37KB 37KB [ 3016.233593] user_namespace 15KB 15KB [ 3016.234207] uid_cache 8KB 8KB [ 3016.234803] dmaengine-unmap-2 4KB 4KB [ 3016.235428] audit_buffer 7KB 7KB [ 3016.236046] skbuff_fclone_cache 67KB 67KB [ 3016.236669] skbuff_head_cache 1053KB 1053KB [ 3016.237289] file_lock_cache 59KB 59KB [ 3016.237885] file_lock_ctx 7KB 7KB [ 3016.238500] fsnotify_mark_connector 24KB 24KB [ 3016.239179] net_namespace 115KB 115KB [ 3016.239777] task_delay_info 108KB 108KB [ 3016.240393] taskstats 84KB 84KB [ 3016.240991] proc_dir_entry 379KB 386KB [ 3016.241606] pde_opener 31KB 31KB [ 3016.242220] seq_file 31KB 45KB [ 3016.242819] sigqueue 118KB 118KB [ 3016.243448] shmem_inode_cache 1233KB 1320KB [ 3016.244183] kernfs_iattrs_cache 227KB 227KB [ 3016.244797] kernfs_node_cache 5303KB 5303KB [ 3016.245413] mnt_cache 212KB 212KB [ 3016.246055] filp 1354KB 1972KB [ 3016.246660] names_cache 8015KB 8954KB [ 3016.247286] hashtab_node 274KB 274KB [ 3016.247884] ebitmap_node 1149KB 1149KB [ 3016.248500] avtab_node 4976KB 4976KB [ 3016.249118] avc_node 31KB 31KB [ 3016.249722] lsm_inode_cache 3230KB 3277KB [ 3016.250341] lsm_file_cache 122KB 208KB [ 3016.250949] key_jar 39KB 39KB [ 3016.251563] uts_namespace 15KB 15KB [ 3016.252176] nsproxy 11KB 11KB [ 3016.252804] vm_area_struct 874KB 1236KB [ 3016.253425] fs_cache 52KB 60KB [ 3016.254025] files_cache 255KB 255KB [ 3016.254637] signal_cache 364KB 586KB [ 3016.255256] sighand_cache 339KB 360KB [ 3016.255859] task_struct 1056KB 1470KB [ 3016.256480] cred_jar 126KB 196KB [ 3016.257103] anon_vma_chain 216KB 287KB [ 3016.257705] anon_vma 252KB 278KB [ 3016.258324] pid 54KB 86KB [ 3016.258930] Acpi-Operand 100KB 134KB [ 3016.259664] Acpi-ParseExt 27KB 27KB [ 3016.260288] Acpi-Parse 114KB 130KB [ 3016.260884] Acpi-State 189KB 204KB [ 3016.261497] Acpi-Namespace 24KB 24KB [ 3016.262114] numa_policy 3KB 3KB [ 3016.262712] trace_event_file 176KB 176KB [ 3016.263344] ftrace_event_field 280KB 280KB [ 3016.263953] pool_workqueue 40KB 40KB [ 3016.264567] task_group 16KB 16KB [ 3016.265184] mm_struct 273KB 441KB [ 3016.265782] vmap_area 539KB 539KB [ 3016.266406] page->ptl 182KB 271KB [ 3016.267013] kmemleak_scan_area 270KB 270KB [ 3016.267640] kmemleak_object 790843KB 790843KB [ 3016.268267] kmalloc-8k 4560KB 4736KB [ 3016.268881] kmalloc-4k 6280KB 7872KB [ 3016.269511] kmalloc-2k 3940KB 4448KB [ 3016.270137] kmalloc-1k 2226KB 3680KB [ 3016.270739] kmalloc-512 28722KB 28976KB [ 3016.271361] kmalloc-256 1194KB 1208KB [ 3016.271957] kmalloc-192 540KB 540KB [ 3016.272575] kmalloc-128 565KB 584KB [ 3016.273216] kmalloc-96 589KB 1076KB [ 3016.273825] kmalloc-64 1126KB 1336KB [ 3016.274439] kmalloc-32 95236KB 95236KB [ 3016.275181] kmalloc-16 337KB 368KB [ 3016.275779] kmalloc-8 304KB 322KB [ 3016.276395] kmem_cache_node 47KB 47KB [ 3016.276990] kmem_cache 75KB 75KB [ 3016.277605] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=6249,uid=0 [ 3016.280129] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1239444kB, anon-rss:232092kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:912kB oom_score_adj:0 [ 3017.827697] oom_reaper: reaped process 14615 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB VM DIAGNOSIS: 03:18:25 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81751d37 RDX=ffff8880469fb480 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffff888044c1fad8 R8 =0000000000000001 R9 =ffff88800b6d98ef R10=0000000000000000 R11=0000000000000001 R12=ffff888008f14804 R13=ffff888044c1fc48 R14=0000000000008000 R15=0000000000000000 RIP=ffffffff8140cb44 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f1f08f760 CR3=0000000047c5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000003 RBX=ffffffff857a1050 RCX=ffffffff81eefebf RDX=0000000000000000 RSI=ffffffff85aced9a RDI=ffffffff857a102c RBP=ffffffff857a1050 RSP=ffff88804655f4e8 R8 =ffffffff85aced9a R9 =ffffffff85acedd6 R10=0000000000032046 R11=1ffff11008cabeae R12=ffffffff857a1050 R13=ffffffff857a102c R14=ffffffff857a104c R15=dffffc0000000000 RIP=ffffffff8110790e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa6498ae700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb459e685e0 CR3=0000000038376000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ffff0000000000ff0000 XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000