00000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 04:41:51 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x2000000000000000, 0x0, 0x0) 04:41:51 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 04:41:51 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0xfffffff7) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2849.678925] FAULT_INJECTION: forcing a failure. [ 2849.678925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2849.681972] CPU: 0 PID: 13242 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2849.683565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2849.685493] Call Trace: [ 2849.686128] dump_stack+0x107/0x167 [ 2849.686979] should_fail.cold+0x5/0xa [ 2849.687877] __alloc_pages_nodemask+0x182/0x600 [ 2849.688983] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2849.690401] alloc_pages_current+0x187/0x280 [ 2849.691765] allocate_slab+0x26f/0x380 [ 2849.692676] ___slab_alloc+0x470/0x700 [ 2849.693597] ? io_submit_sqes+0x6fe4/0x8610 [ 2849.694604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2849.695825] ? trace_hardirqs_on+0x5b/0x180 [ 2849.696836] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2849.697943] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2849.699010] io_submit_sqes+0x6fe4/0x8610 [ 2849.699999] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2849.701158] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2849.702268] ? find_held_lock+0x2c/0x110 [ 2849.703224] ? io_submit_sqes+0x8610/0x8610 [ 2849.704225] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2849.705345] ? wait_for_completion_io+0x270/0x270 [ 2849.706447] ? rcu_read_lock_any_held+0x75/0xa0 [ 2849.707494] ? vfs_write+0x354/0xb10 [ 2849.708335] ? fput_many+0x2f/0x1a0 [ 2849.709174] ? ksys_write+0x1a9/0x260 [ 2849.710040] ? __ia32_sys_read+0xb0/0xb0 [ 2849.710969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2849.712162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2849.713352] do_syscall_64+0x33/0x40 [ 2849.714203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2849.715365] RIP: 0033:0x7f0301185b19 [ 2849.716212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2849.720374] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2849.722094] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2849.723687] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2849.725299] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.726906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2849.728506] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:41:51 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65, 0x0, {0x0, r7}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 04:42:07 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x10010, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB='\x00'/11]) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r8 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r9, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r7, 0x8000000) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r8, 0x10000000) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r9, 0x0, r13, 0x2, 0x0, 0x1, {0x0, r10}}, 0xfffffffe) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x0, 0x0, r6, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x1, 0x2000, 0x0, {0x0, r10}}, 0x42b) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x40010, r0, 0x10000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x0, @fd_index=0x7, 0x8000, &(0x7f0000000340)=""/225, 0xe1, 0x4, 0x1, {0x0, r8}}, 0x800) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x305001, 0x40, 0x1}, 0x18) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000340)=""/186, 0xba}], 0x2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 04:42:07 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0xc82, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd_index=0x5, 0x3f, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4000, @fd_index, 0x7ff, 0x496, 0x1ff, 0x8, 0x0, {0x2}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r7}}, 0x4) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2865.468057] FAULT_INJECTION: forcing a failure. [ 2865.468057] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.469785] CPU: 1 PID: 13266 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2865.470780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2865.471974] Call Trace: [ 2865.472360] dump_stack+0x107/0x167 [ 2865.472895] should_fail.cold+0x5/0xa [ 2865.473456] ? create_object.isra.0+0x3a/0xa30 [ 2865.474113] should_failslab+0x5/0x20 [ 2865.474670] kmem_cache_alloc+0x5b/0x310 [ 2865.475254] ? mark_held_locks+0x9e/0xe0 [ 2865.475843] create_object.isra.0+0x3a/0xa30 [ 2865.476484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2865.477228] kmem_cache_alloc_bulk+0x168/0x320 [ 2865.477901] io_submit_sqes+0x6fe4/0x8610 [ 2865.478533] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2865.479253] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2865.479960] ? find_held_lock+0x2c/0x110 [ 2865.480559] ? io_submit_sqes+0x8610/0x8610 [ 2865.481206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2865.481896] ? wait_for_completion_io+0x270/0x270 [ 2865.482587] ? rcu_read_lock_any_held+0x75/0xa0 [ 2865.483247] ? vfs_write+0x354/0xb10 [ 2865.483779] ? fput_many+0x2f/0x1a0 [ 2865.484300] ? ksys_write+0x1a9/0x260 [ 2865.484841] ? __ia32_sys_read+0xb0/0xb0 [ 2865.485433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2865.486183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2865.486932] do_syscall_64+0x33/0x40 [ 2865.487463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2865.488190] RIP: 0033:0x7f0301185b19 [ 2865.488720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2865.491346] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2865.492436] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2865.493462] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2865.494473] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.495496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2865.496511] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:07 executing program 5: fchdir(0xffffffffffffffff) r0 = syz_io_uring_setup(0x8007d06, &(0x7f00000002c0)={0x0, 0xff7ffffc, 0x8, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x339b, &(0x7f0000000040)={0x0, 0xd88b, 0x8, 0x2, 0x27d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x1f, 0x1, 0x1, 0x9d4}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x5}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x58a, 0x3f}}, './file0\x00'}) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000e, 0x110, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x11, r3, 0x10000000) 04:42:07 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x2000) 04:42:07 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) [ 2865.822063] FAULT_INJECTION: forcing a failure. [ 2865.822063] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.823530] CPU: 1 PID: 13294 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2865.824393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2865.825438] Call Trace: [ 2865.825771] dump_stack+0x107/0x167 [ 2865.826230] should_fail.cold+0x5/0xa [ 2865.826700] ? create_object.isra.0+0x3a/0xa30 [ 2865.827259] should_failslab+0x5/0x20 [ 2865.827729] kmem_cache_alloc+0x5b/0x310 [ 2865.828237] ? mark_held_locks+0x9e/0xe0 [ 2865.828739] create_object.isra.0+0x3a/0xa30 [ 2865.829286] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2865.829918] kmem_cache_alloc_bulk+0x168/0x320 [ 2865.830486] io_submit_sqes+0x6fe4/0x8610 [ 2865.831017] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2865.831636] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2865.832237] ? find_held_lock+0x2c/0x110 [ 2865.832741] ? io_submit_sqes+0x8610/0x8610 [ 2865.833291] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2865.833884] ? wait_for_completion_io+0x270/0x270 [ 2865.834486] ? rcu_read_lock_any_held+0x75/0xa0 [ 2865.835058] ? vfs_write+0x354/0xb10 [ 2865.835516] ? fput_many+0x2f/0x1a0 [ 2865.835963] ? ksys_write+0x1a9/0x260 [ 2865.836431] ? __ia32_sys_read+0xb0/0xb0 [ 2865.836935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2865.837592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2865.838228] do_syscall_64+0x33/0x40 [ 2865.838686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2865.839315] RIP: 0033:0x7f0301185b19 [ 2865.839776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2865.842038] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2865.842971] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2865.843847] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2865.844719] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2865.845597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2865.846468] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:07 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x800000) 04:42:07 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x2060}, 0x10001) 04:42:07 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0xc6) 04:42:07 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x480c1) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x3, 0x1, 0x5, 0x5, 0x13, "ea1119077d370d0e2ede9dba53ee64a346d5ae"}, 0x1c, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:07 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2007, @fd_index=0x5, 0x1, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0xfffffffe) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x8000b) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6erspan0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r7, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x12345}, 0x8001) 04:42:08 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1, 0x200}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 04:42:24 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x367f, &(0x7f0000000000)={0x0, 0x664e, 0x8, 0x0, 0x1ff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)=ANY=[@ANYBLOB="010000170100000018000000", @ANYRES32=r3, @ANYBLOB="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"]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) pipe2(&(0x7f0000000180), 0x84000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)='./file0\x00', 0x80, 0x40000, 0x23456, {0x0, r6}}, 0x2) 04:42:24 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x20000000) 04:42:24 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x7cef, 0x0, 0x0, 0xfffc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x4000010, r3, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r0}}, 0x5) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r6) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r9, 0x4, @unused=[0x3, 0x2, 0x2, 0x2], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r9, 0x4, @unused=[0x3, 0x5, 0x2, 0x2], @devid}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x20, 0xf409, 0x1, @private1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x20, 0x1, 0x6}}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000580)={{r3}, r9, 0x12, @unused=[0x6, 0x8, 0x9, 0x80], @name="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"}) 04:42:24 executing program 4: r0 = syz_io_uring_setup(0x8007d04, &(0x7f0000001840)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) sendmsg(r3, &(0x7f0000000500)={&(0x7f0000000080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000340)="a0a6298e981fb117255d444c3a1e3deaa04cd4a6652302ff78127673d232369f7ef767e0fdf7f4494905ceddf1a9bd3bf5a9f92b7597e5931ffa68569d09092ad6a106148f6d703b6c94e35ec6bcc7a3edce6a3aa278d917c514096039393db0f277b508f8165b31004c9ec75ae0dc7f0ceaeaa375ed26a87b774f073427ca912ff5c0998b2ee07a9d32636ca56152973a1425791eef818d2211471a688c319ae633b4e4a7f7630e0077835f23c325", 0xaf}, {&(0x7f0000000180)="38a7b8c980c8e9caf03b8ff8ac3891f6bb26bad202be10c35e33462db7b3992e41f3af79bbbaabc5c6dc987626073113bafd76bfd0e5895e36f077a4607ca0743fca6bc13ea7acfccab482b901d3149b63480dfc4925b0", 0x57}, {&(0x7f0000000400)="6da499ee78f1f4b83114a47814f994c3ae42eee3a9dcb53c4ce7a09fda5da6ac868499a3324fc1cac70f2869d6d9aef5f7303b77c69a904efc36ea2519a33a46e1f766ddaf78e4a4fd5ae40500941e8ad38f072ae08df5b94363ca12ba3440f441bc4b5a991d3f865fc3cecbfee353e0868b57231b9951004dbb87777ad96bdd7acdeb3dc0242f7b609c439fe1b475463489c0057c51de652c766cfc9a6410e59a183e1bda1eb43773846989bdace118c535a1c714156657252f1765e8939c8d9eb6a620a96a2d3421d1dd08363778f09e005212d852357ad408f142f9b5908991ab1be3", 0xe4}, {&(0x7f0000000580)="59b38bcd60f223bf4c541a6773295d714ef226fded44d620ff1a158658abb306c0aca1126b44e669433f698c5677b78d12a66545cf7872707cea22011702fd1cd64a04595ca82b5f9cc216f0a365cc2d804fe90ea0f8de41975c2cf800040ee2375c974de213ab2c4a4561a70684d8067dc4ae720a6244e058a8117aa777b4335add4663432431a81226775bca5100", 0x8f}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000000)="28ec5d6a7b30f1fecf9971d5e8cd09aad28c0d5296356bb05435dd103fe865b0905f1b7279266be2fc94", 0x2a}, {&(0x7f0000000240)="77c75f870505be4f910b913ff80918bf365d9e977ffeed30541a3e3fb9c0319f9153c2c9b917abd13c1ef9ad681d754407f480a76a5dea777ae52c87dd", 0x3d}, {&(0x7f0000000280)="86ac8d239ccd3b83", 0x8}, {&(0x7f0000001640)="3adb40a95873c331c0cc3e7a01398e7267068a831b9384fcdde8a581cd7f13b505c1d56b377c949e7256e23918a968c8ee386a036f1f822fa2a24c9724e28839b7d5c0d8dd48569c86dab2e1f7b994332b80ba63e500c438f59b809b5a3f96baed7cb7c4fc7ce3ae9e762a9bc9b2729dba8edf4d49d412d189cc973943164343bf27debb1a6ff095ccb3444d2e75b2f011d655edd7da04d59b7ef212fd46c61c232857d28d111dfeb7ff051e27d61e1eb7cfba45feba0b21a74d39c8e1fe1cc186a95f7998c7ef81c648dca9e09e0144397997ca0fb53f2d9c83c70ceb4304698427a9815cbd8f251c7480ff2828b0106a26f792ecfc0561c745fd215320", 0xfe}], 0x9}, 0x80) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x8000, 0x24) io_uring_enter(r3, 0x33a5, 0xdae5, 0x1, &(0x7f0000000040)={[0x8000]}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_setup(0x1be8, &(0x7f0000000000)={0x0, 0xb39d, 0x0, 0x3, 0x1ae, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index, 0x8, &(0x7f0000000600)=[{&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000580)=""/90, 0x5a}], 0x5, 0x10, 0x1}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2882.116602] FAULT_INJECTION: forcing a failure. [ 2882.116602] name failslab, interval 1, probability 0, space 0, times 0 [ 2882.119109] CPU: 0 PID: 13336 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2882.120578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2882.122339] Call Trace: [ 2882.122909] dump_stack+0x107/0x167 [ 2882.123692] should_fail.cold+0x5/0xa [ 2882.124502] ? create_object.isra.0+0x3a/0xa30 [ 2882.125473] should_failslab+0x5/0x20 [ 2882.126279] kmem_cache_alloc+0x5b/0x310 [ 2882.127142] ? mark_held_locks+0x9e/0xe0 [ 2882.128007] create_object.isra.0+0x3a/0xa30 [ 2882.128939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2882.130036] kmem_cache_alloc_bulk+0x168/0x320 [ 2882.131008] io_submit_sqes+0x6fe4/0x8610 [ 2882.131923] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2882.132984] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2882.134022] ? find_held_lock+0x2c/0x110 [ 2882.134887] ? io_submit_sqes+0x8610/0x8610 [ 2882.135802] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2882.136830] ? wait_for_completion_io+0x270/0x270 [ 2882.137857] ? rcu_read_lock_any_held+0x75/0xa0 [ 2882.138830] ? vfs_write+0x354/0xb10 [ 2882.139621] ? fput_many+0x2f/0x1a0 [ 2882.140386] ? ksys_write+0x1a9/0x260 [ 2882.141185] ? __ia32_sys_read+0xb0/0xb0 [ 2882.142060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2882.143172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2882.144280] do_syscall_64+0x33/0x40 [ 2882.145073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2882.146187] RIP: 0033:0x7f0301185b19 [ 2882.146971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2882.150856] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2882.152467] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2882.153978] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2882.155456] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2882.156925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2882.158417] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:24 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0xfffffffffffffffc, 0x0, 0xa, 0x5, 0x1}, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x80000, 0x23) openat(r4, &(0x7f0000000080)='./file0\x00', 0x101000, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3c, 0x6, 0x0, 0x1, 0x2, 0x6, 0x9, 0xff, 0x40, 0x2e8, 0x3, 0x8, 0x38, 0x2, 0x81, 0x8, 0xe4}, [{0x70000000, 0xfffffc00, 0xb9, 0x0, 0x2, 0x6, 0x20, 0x3}], "4ad338ca2ff2f63a6db4eb6c2811f57616cedfb51cfb98b1ccc780de379adb8831cbab81ef685177abc3bea4c815ea5fcc8c846b23221db28ba972b249861769a4a42476217b9a24b57f02f5d99bcfc21bde89d13775a65dd4b49e1c9d8359614f230de1b5", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5dd) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)="e6040a85354733fd738263f0cd9a3e400253fad088ee39a07ffecdc70302d1d73b7e9820c8e9527bf9c17f82c6e6daa9282073173cc88349df2bdc8763f01b9250e2e6e1c896b610d405b4e65daf7e4563", 0x51, 0x1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x80000000000000) 04:42:24 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x10d0}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x4000, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xd3, 0x8, 0x5a90, 0xa, @empty, @private1, 0x20, 0x10, 0x8001, 0xff}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x51) 04:42:24 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f0000000400)=""/170, 0xaa}], 0x3) fchdir(r3) dup(r3) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x30, r3, 0x8000000) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd_index=0x3, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/148, 0x94}, {&(0x7f0000000340)=""/187, 0xbb}], 0x2, 0xa, 0x1, {0x0, r9}}, 0x3) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x4001010, r0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x10004) syz_io_uring_setup(0x44e1, &(0x7f0000000000)={0x0, 0xfd21, 0x20, 0x2, 0x295, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r5 = syz_open_dev$rtc(&(0x7f0000000180), 0x9, 0x200840) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2004, @fd=r5, 0x80, 0x0, 0x0, 0x1d, 0x1, {0x3}}, 0x40000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=0x1, 0x8, 0x5) fchdir(r6) fsetxattr$security_capability(r6, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x1, 0x3}, {0xa3, 0x101}]}, 0x14, 0x3) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:24 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) [ 2882.799694] FAULT_INJECTION: forcing a failure. [ 2882.799694] name failslab, interval 1, probability 0, space 0, times 0 [ 2882.802206] CPU: 1 PID: 13375 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2882.803674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2882.805429] Call Trace: [ 2882.805987] dump_stack+0x107/0x167 [ 2882.806763] should_fail.cold+0x5/0xa [ 2882.807569] ? create_object.isra.0+0x3a/0xa30 [ 2882.808531] should_failslab+0x5/0x20 [ 2882.809341] kmem_cache_alloc+0x5b/0x310 [ 2882.810197] ? mark_held_locks+0x9e/0xe0 [ 2882.811059] create_object.isra.0+0x3a/0xa30 [ 2882.811991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2882.813065] kmem_cache_alloc_bulk+0x168/0x320 [ 2882.814044] io_submit_sqes+0x6fe4/0x8610 [ 2882.814955] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2882.816010] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2882.817022] ? find_held_lock+0x2c/0x110 [ 2882.817896] ? io_submit_sqes+0x8610/0x8610 [ 2882.818819] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2882.819839] ? wait_for_completion_io+0x270/0x270 [ 2882.820853] ? rcu_read_lock_any_held+0x75/0xa0 [ 2882.821840] ? vfs_write+0x354/0xb10 [ 2882.822631] ? fput_many+0x2f/0x1a0 [ 2882.823397] ? ksys_write+0x1a9/0x260 [ 2882.824191] ? __ia32_sys_read+0xb0/0xb0 [ 2882.825057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2882.826168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2882.827257] do_syscall_64+0x33/0x40 [ 2882.828037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2882.829113] RIP: 0033:0x7f0301185b19 [ 2882.829905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2882.833788] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2882.835382] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2882.836881] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2882.838414] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2882.839914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2882.841416] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:41 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 04:42:41 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x100010, r3, 0x10000000) r7 = accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_io_uring_submit(r1, r6, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/66, 0x42}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/78, 0x4e}], 0x4, &(0x7f0000000580)=""/178, 0xb2}, 0x0, 0x1, 0x0, {0x1, r5}}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x6, 0x0, 0xffffffffffffffff, 0x0}, 0x4008001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) io_uring_enter(r4, 0x68de, 0x64a0, 0x1, &(0x7f0000000040)={[0x8]}, 0x8) [ 2899.036124] FAULT_INJECTION: forcing a failure. [ 2899.036124] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.037754] CPU: 0 PID: 13382 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2899.038674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.039786] Call Trace: [ 2899.040144] dump_stack+0x107/0x167 [ 2899.040628] should_fail.cold+0x5/0xa [ 2899.041139] ? create_object.isra.0+0x3a/0xa30 [ 2899.041755] should_failslab+0x5/0x20 [ 2899.042258] kmem_cache_alloc+0x5b/0x310 [ 2899.042793] ? mark_held_locks+0x9e/0xe0 [ 2899.043330] create_object.isra.0+0x3a/0xa30 [ 2899.043907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2899.044581] kmem_cache_alloc_bulk+0x168/0x320 [ 2899.045191] io_submit_sqes+0x6fe4/0x8610 [ 2899.045768] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2899.046423] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2899.047071] ? find_held_lock+0x2c/0x110 [ 2899.047609] ? io_submit_sqes+0x8610/0x8610 [ 2899.048191] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2899.049008] ? wait_for_completion_io+0x270/0x270 [ 2899.049887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2899.051036] ? vfs_write+0x354/0xb10 [ 2899.051958] ? fput_many+0x2f/0x1a0 [ 2899.052850] ? ksys_write+0x1a9/0x260 [ 2899.053842] ? __ia32_sys_read+0xb0/0xb0 [ 2899.054460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2899.055248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2899.056026] do_syscall_64+0x33/0x40 [ 2899.056591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2899.057360] RIP: 0033:0x7f0301185b19 [ 2899.057904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.059986] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2899.060796] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2899.061607] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2899.062409] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2899.063214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2899.063964] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:41 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000500)) syz_io_uring_setup(0x4bec, &(0x7f0000000080)={0x0, 0x79ab, 0x2, 0x0, 0xc3, 0x0, r0}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r5, r2, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x4004, @fd_index=0x3, 0x7, &(0x7f0000002640)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/135, 0x87}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x5, 0xa, 0x1}, 0x4) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_complete(r6) 04:42:41 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x2000000000000000) 04:42:41 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r1, 0x9, 0x0, 0xde, 0x4, 0x0, {0x0, r8}}, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r12, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_seq_dummy', 0x0, 0x2) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x9d, @remote, 0x5}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a8bbb9ac690c39f769a00a9dcce45bc78b56be63155342e416fe8d48565f71b137b2e96e20812281099d9af77ffbb8a6daaf38463cfeaac22c57bc611cb8309eb5c4349f56353ca5974b6323249f56ceebb427c66a", 0x55}, {&(0x7f0000000340)="6424a34e6948b13a61d14283616569362d75a05c75ff0f0561c21c8f870bdaae90a2a81c0ed6ad73e44144c012e12c52f2fcb08aed7860943d332d9b8343e59b802576cab8cb7715364c39a5187dfb8e96e29a9ecd55f76097cb15080c0bcbb1d6e992505eec0136e2ea4fe9e7d2c8ebe6fff5d3d8887af67d776bcf3d7241243629d965db4d0860d5a81dcaa942ba807e58072598f40bed057e6b796ce21e8ca090f2b502a0ec06d4f960ac38f5cd513bfe4847fe695a14785d62e72f9516c7480084bb0dc1912430dff08e0e9a2b31b702092a", 0xd4}], 0x2, &(0x7f0000000440)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x6, 0x10, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, @loopback]}}}, @rthdr={{0x18, 0x29, 0x39, {0x87, 0x0, 0x0, 0x9}}}], 0xb0}, 0x880) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2899.084509] kauditd_printk_skb: 10 callbacks suppressed [ 2899.084523] audit: type=1400 audit(1780116161.111:3114): avc: denied { execute } for pid=13381 comm="syz-executor.4" path="/proc/13381/mountstats" dev="proc" ino=46794 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 04:42:41 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x105d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0x2}}, './file0\x00'}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, r6, 0x8000000) syz_io_uring_setup(0x1d14, &(0x7f0000000040)={0x0, 0x7972, 0x20, 0x2, 0x220, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x2007, @fd_index=0xa, 0x80000001, &(0x7f0000000340)=""/147, 0x93, 0x6, 0x1, {0x0, r9}}, 0xfffffffb) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000001c0)=0x1f) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x0, @empty}}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x20850, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5a8, 0x4700, 0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8) 04:42:41 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000080)={0x0, 0x3938700}}, 0x3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x1010, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x9) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x84000) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) 04:42:41 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, r4, 0x8000000) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 04:42:41 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 04:42:41 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x841a}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r11, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x1010, r3, 0x8000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x1ffe0, 0x0, 0x0, 0x2}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2899.545737] FAULT_INJECTION: forcing a failure. [ 2899.545737] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.548273] CPU: 0 PID: 13437 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2899.549751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.551505] Call Trace: [ 2899.552070] dump_stack+0x107/0x167 [ 2899.552837] should_fail.cold+0x5/0xa [ 2899.553648] ? create_object.isra.0+0x3a/0xa30 [ 2899.554605] should_failslab+0x5/0x20 [ 2899.555410] kmem_cache_alloc+0x5b/0x310 [ 2899.556266] ? mark_held_locks+0x9e/0xe0 [ 2899.557124] create_object.isra.0+0x3a/0xa30 [ 2899.558058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2899.559140] kmem_cache_alloc_bulk+0x168/0x320 [ 2899.560112] io_submit_sqes+0x6fe4/0x8610 [ 2899.561028] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2899.562091] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2899.563120] ? find_held_lock+0x2c/0x110 [ 2899.563986] ? io_submit_sqes+0x8610/0x8610 [ 2899.564910] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2899.565946] ? wait_for_completion_io+0x270/0x270 [ 2899.566965] ? rcu_read_lock_any_held+0x75/0xa0 [ 2899.567949] ? vfs_write+0x354/0xb10 [ 2899.568745] ? fput_many+0x2f/0x1a0 [ 2899.569516] ? ksys_write+0x1a9/0x260 [ 2899.570321] ? __ia32_sys_read+0xb0/0xb0 [ 2899.571183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2899.572292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2899.573384] do_syscall_64+0x33/0x40 [ 2899.574177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2899.575264] RIP: 0033:0x7f0301185b19 [ 2899.576049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.579923] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2899.581553] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2899.583061] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2899.584561] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2899.586077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2899.587573] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:41 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@ethernet={0x6, @multicast}}, 0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7285, &(0x7f0000000040)={0x0, 0xdcc5, 0x4, 0x3, 0x296, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x1}, 0x40009) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x10440, 0x0) fchdir(r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x400}}, './file0\x00'}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r7 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r8, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r6, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r7, 0x10000000) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r8, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r9}}, 0xfffffffe) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)='./file0\x00', 0x40, 0x204001, 0x12345, {0x0, r9}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8005) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 6: r0 = syz_io_uring_setup(0x7d08, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x37d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x21aa, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r9 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd=r10, 0x1f, &(0x7f0000000340)="cf238c4fb6996037b0498478b4de1a93ab8fd4144b9fdea063c9ef0481f993a7c6cbd632f874df144406e66c5abae99a0bdb19ba6af3605db1292a175078e0e77cce2a21099420bf3e2330b450d912b7c84df5227982c21de89000c273d178d63509ec554afba71c07fe9ac5d9e45922f55a33a2eff5c4c21f1ca13d11c6a3f62192f8160c5e709b939e89cf98cb11fe53", 0x91, 0x18, 0x1}, 0xf60) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) sendmsg$FOU_CMD_ADD(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00030fe07c9adcca8ae0190615f78c6aad552283064e2000000600"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) 04:42:59 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x810, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x12400, 0x74, 0x2}, 0x18) io_uring_enter(r4, 0x1a3, 0xdfb4, 0x1, &(0x7f0000000080)={[0x7]}, 0x8) r5 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x12ff, &(0x7f0000000c00)={0x0, 0x7c7e, 0x8, 0x2, 0x124}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000500)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_STATX={0x15, 0x4, 0x0, r7, &(0x7f0000000c80), &(0x7f0000000d80)='./file0\x00', 0x1, 0x2000, 0x1}, 0x6) readv(r4, &(0x7f0000000b40)=[{&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f00000000c0)}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/241, 0xf1}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000a40)=""/206, 0xce}, {&(0x7f0000000280)=""/11, 0xb}], 0x9) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r4, 0x8000000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000580)) 04:42:59 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x4010, 0xffffffffffffffff, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x4000010, r0, 0x10000000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r7 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r8, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r6, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r7, 0x10000000) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r8, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r9}}, 0xfffffffe) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@xdp={0x2c, 0x1, 0x0, 0x35}, 0x0, 0x0, 0x1, {0x0, r9}}, 0xffffffff) 04:42:59 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6b7f, &(0x7f0000000240)={0x0, 0xf717, 0x2, 0x2, 0x31a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000440)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x3, 0x81280) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f0000000480)={0x30000000}, r5}, 0x49) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r6}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x9) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f00000000c0)) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x12, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@dev, @in6=@empty}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 04:42:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) r1 = syz_io_uring_setup(0x44f8, &(0x7f0000000080)={0x0, 0x2, 0x10, 0x2, 0x58, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2917.464130] FAULT_INJECTION: forcing a failure. [ 2917.464130] name failslab, interval 1, probability 0, space 0, times 0 [ 2917.465630] CPU: 1 PID: 13471 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2917.466503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.467548] Call Trace: [ 2917.467907] dump_stack+0x107/0x167 [ 2917.468380] should_fail.cold+0x5/0xa [ 2917.468867] ? create_object.isra.0+0x3a/0xa30 [ 2917.469429] should_failslab+0x5/0x20 [ 2917.469909] kmem_cache_alloc+0x5b/0x310 [ 2917.470405] ? mark_held_locks+0x9e/0xe0 [ 2917.470911] create_object.isra.0+0x3a/0xa30 [ 2917.471442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2917.472076] kmem_cache_alloc_bulk+0x168/0x320 [ 2917.472643] io_submit_sqes+0x6fe4/0x8610 [ 2917.473163] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2917.473773] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2917.474369] ? find_held_lock+0x2c/0x110 [ 2917.474870] ? io_submit_sqes+0x8610/0x8610 [ 2917.475410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2917.475996] ? wait_for_completion_io+0x270/0x270 [ 2917.476594] ? rcu_read_lock_any_held+0x75/0xa0 [ 2917.477160] ? vfs_write+0x354/0xb10 [ 2917.477608] ? fput_many+0x2f/0x1a0 [ 2917.478054] ? ksys_write+0x1a9/0x260 [ 2917.478502] ? __ia32_sys_read+0xb0/0xb0 [ 2917.479000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2917.479645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2917.480275] do_syscall_64+0x33/0x40 [ 2917.480742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2917.481367] RIP: 0033:0x7f0301185b19 [ 2917.481817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2917.483954] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2917.484850] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2917.485709] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2917.486543] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2917.487384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2917.488226] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:42:59 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r0, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x780}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x12, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/83, 0x53}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000580)=""/205, 0xcd}], 0x4, &(0x7f0000000480)=""/176, 0xb0}, 0x0, 0x14021, 0x1, {0x2}}, 0xff) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 04:42:59 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000680)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x527d, &(0x7f0000000580)={0x0, 0xcd8a, 0x4, 0x7f, 0x20b}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00006d0000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x42008, &(0x7f0000000480)={'trans=xen,', {[{@uname={'uname', 0x3d, '\x00'}}, {@noextend}, {@dfltuid}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r10}}, {@uid_lt={'uid<', 0xee00}}, {@euid_lt={'euid<', r11}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r12}}, 0x1) 04:42:59 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6795, &(0x7f0000000080)={0x0, 0x713d, 0x0, 0x0, 0x37d, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x4, 0x2, 0x0, 0x4, 0x4, 0x0, {0x0, r5}}, 0x1a3) 04:42:59 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x3b) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r8, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:42:59 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x10000000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x400200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x8010, r3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0xfffffffe) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x20}, 0x1}, 0x11) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x5, 0x4, {}, 0x20, 0x0, 0x1, {0x0, 0x0, r5}}, 0x6) pread64(r3, &(0x7f0000000000)=""/39, 0x27, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r9, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x48}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="64070000190000002dbd7000fbdbdf2516000000bd00228008007f0064010101990bf806819642c8ca69aaa144d67615f5bad358487be08307b8c231e385881ad31f80b90df7d4b357e623e31e2104c1b36dd94a21650c532b8a2fa66b571c1672e11f912f761e67b0b380567801a5ef52e756e9247f40133846636dfc91085d7be7ec55a9c7efa4a29c6861aa94e801abbe4d44488224a664435df1b7c433074eccf95d5d897bc25bd0070044f0676b36fb078b1b6ae8948961095e3439e1739a31abc3bebe39d0d37bf3c57ecd52bfe700000082d8b6142401f781d358865c5a267cc5aab09e639e8d763162e575088369e86e0371b3153604a36072b3cb990d4d76f92792fbf6bb53086e6a77843f1b5d140f3901d648f5da23cee2e7d7796ecf0c0ec3eabeb1c4b85182601a1a1b5011a1e2476238485b191dad9895e700435d260465dc4c15bb579e5031ff2475dc6f04eee978bc6932a58ea6dac71437cf3d157e34e4f1e78fe794387eaebc9afa4c142a23bd19915b541c7006f7f615044eb904d972855e6be9c80453610117806ee98043c27c4d240ce69c154df34e46b2228e0614614f56b67a559043bc9520475f93cebd652dfd30a068ed2d3368c8f3c533fd3214003800fe8800000000000000000000000000012cccaeaa85aa30213a7d515ac2b750abd2a994e1056ecab577aaece79a67c2fb6bca5efcf979e0db9f10129a5d062e11079e93b6f67a91944040c6ba7d45bb07a6316521e0928e96dc2a648790e553ab0c006d005f0300000000000008001e00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"/545], 0x764}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000880) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 3: r0 = syz_io_uring_setup(0x410d, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) 04:43:15 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x400000, 0x4, 0x0, 0x22a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000240)={0x28000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x37}, &(0x7f0000000340)=""/137, 0x89, &(0x7f00000000c0)=""/29, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, r4, 0xb3c61000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) clock_gettime(0x1, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r11 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r11, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)='./file0\x00', 0x40, 0x100, 0x1, {0x0, r7}}, 0x101) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 04:43:15 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) perf_event_open(0x0, 0x0, 0xb, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8c800, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) fallocate(r7, 0x13, 0x10001, 0x9) fchdir(0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8002}, 0x1}, 0x7) syz_io_uring_setup(0x1e12, &(0x7f0000000000)={0x0, 0xfedc, 0x2, 0x2, 0x1f6, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x96247c520bc85001, @fd=r0, 0x34749c13, 0x7, 0x0, 0x1, 0x0, {0x2}}, 0x0) 04:43:15 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="652f0477975dd172a647f5cb286ccc66f5845131942571ca3e0b092a51ec0897b1f701e2"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x30, 0xffffffffffffffff, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) io_uring_enter(r11, 0x1fac, 0x56b6, 0x1, &(0x7f0000000180)={[0x4]}, 0x8) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r10, 0xfff, 0x0, 0x1, 0x5, 0x1}, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2933.125808] FAULT_INJECTION: forcing a failure. [ 2933.125808] name failslab, interval 1, probability 0, space 0, times 0 [ 2933.128319] CPU: 1 PID: 13528 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2933.129782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2933.131567] Call Trace: [ 2933.132130] dump_stack+0x107/0x167 [ 2933.132904] should_fail.cold+0x5/0xa [ 2933.133719] should_failslab+0x5/0x20 [ 2933.134529] kmem_cache_alloc_bulk+0x4b/0x320 [ 2933.135482] io_submit_sqes+0x6fe4/0x8610 [ 2933.136402] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2933.137449] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2933.138481] ? find_held_lock+0x2c/0x110 [ 2933.139346] ? io_submit_sqes+0x8610/0x8610 [ 2933.140266] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2933.141281] ? wait_for_completion_io+0x270/0x270 [ 2933.142314] ? rcu_read_lock_any_held+0x75/0xa0 [ 2933.143287] ? vfs_write+0x354/0xb10 [ 2933.144076] ? fput_many+0x2f/0x1a0 [ 2933.144840] ? ksys_write+0x1a9/0x260 [ 2933.145639] ? __ia32_sys_read+0xb0/0xb0 [ 2933.146509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2933.147629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2933.148717] do_syscall_64+0x33/0x40 [ 2933.149501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2933.150597] RIP: 0033:0x7f0301185b19 [ 2933.151385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2933.155261] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2933.156866] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2933.158373] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2933.159882] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2933.161385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2933.162910] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:43:15 executing program 0: r0 = syz_io_uring_setup(0x7d03, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) r5 = openat2(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40200, 0x52, 0x23c6373446747d2a}, 0x18) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000140)={0x3, 0x3, 0x1}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x10000, 0x4, 0x0, {0x0, r3, r4}}, 0x3ff) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3) 04:43:15 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x880}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x5d3f, &(0x7f0000000240)={0x0, 0xaa86, 0x10, 0x0, 0x3d0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000500)='./file0\x00', 0x20, 0x4000, 0x1}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x190a, &(0x7f0000000000)={0x0, 0x235a, 0x20, 0x1, 0x231, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0xfff, 0x0, 0x6, 0x0, 0x1}, 0x0) 04:43:15 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x3, 0x2, {0x0, r0}, 0x200, 0x9, 0x1, {0x0, r6, r10}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x40, 0x400000, 0x23456}, 0x4) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x280000b, 0x4000010, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0xda) 04:43:15 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r3, r4, r5, r0, r0], 0x5, 0x0, 0x1}, 0x80000001) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1, 0x13, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10, 0x0, {0x0, r8}}, 0x800) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r9) faccessat2(r9, &(0x7f0000000280)='./file0\x00', 0x2, 0x100) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r11, 0x6, 0x1, 0xa, 0x2, 0x1, {0x3, r10}}, 0x7) 04:43:15 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x34800) fcntl$setstatus(r0, 0x4, 0x62400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x20) fchdir(r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x7504, &(0x7f0000000140)={0x0, 0x124a, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000040)={0x3, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r7 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r9, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r3, &(0x7f0000000000)={0x0, 0x0, 0x5}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:15 executing program 2: r0 = syz_io_uring_setup(0x316c, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x1, 0x42, 0x7f, 0xff, 0x0, 0x7, 0x200, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5efd12, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x6016, 0x2, 0x9, 0x4, 0xc0, 0x20000, 0x81, 0x0, 0x7fffffff, 0x0, 0x7ffe}, r4, 0x8, 0xffffffffffffffff, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8010, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x83, 0x9}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000009, 0x30, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_STATX={0x15, 0x5, 0x0, r4, &(0x7f0000000340), &(0x7f0000000440)='./file0\x00', 0x800, 0x6000, 0x1, {0x0, r8}}, 0x5) 04:43:15 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) [ 2933.786397] FAULT_INJECTION: forcing a failure. [ 2933.786397] name failslab, interval 1, probability 0, space 0, times 0 [ 2933.788820] CPU: 1 PID: 13575 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2933.790279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2933.791997] Call Trace: [ 2933.792556] dump_stack+0x107/0x167 [ 2933.793325] should_fail.cold+0x5/0xa [ 2933.794131] ? create_object.isra.0+0x3a/0xa30 [ 2933.795083] should_failslab+0x5/0x20 [ 2933.795876] kmem_cache_alloc+0x5b/0x310 [ 2933.796748] ? mark_held_locks+0x9e/0xe0 [ 2933.797635] create_object.isra.0+0x3a/0xa30 [ 2933.798601] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2933.799710] kmem_cache_alloc_bulk+0x168/0x320 [ 2933.800710] io_submit_sqes+0x6fe4/0x8610 [ 2933.801643] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2933.802731] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2933.803779] ? find_held_lock+0x2c/0x110 [ 2933.804665] ? io_submit_sqes+0x8610/0x8610 [ 2933.805614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2933.806668] ? wait_for_completion_io+0x270/0x270 [ 2933.807717] ? rcu_read_lock_any_held+0x75/0xa0 [ 2933.808717] ? vfs_write+0x354/0xb10 [ 2933.809527] ? fput_many+0x2f/0x1a0 [ 2933.810317] ? ksys_write+0x1a9/0x260 [ 2933.811137] ? __ia32_sys_read+0xb0/0xb0 [ 2933.812023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2933.813153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2933.814278] do_syscall_64+0x33/0x40 [ 2933.815069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2933.816120] RIP: 0033:0x7f0301185b19 [ 2933.816899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2933.820713] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2933.822306] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2933.823792] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2933.825353] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2933.826919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2933.828481] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:43:15 executing program 3: r0 = syz_io_uring_setup(0x2, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0xffffffff, 0xfffffffd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x110, r0, 0x10000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = syz_io_uring_setup(0x16fe, &(0x7f0000000180)={0x0, 0x94bf, 0x8, 0x2, 0x37c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = syz_open_dev$vcsn(&(0x7f0000000280), 0x100000000, 0x183200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1800000, 0x10, r7, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x198d, 0x1613, 0x1, &(0x7f0000000240)={[0x7]}, 0x8) 04:43:16 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@private0, 0x40}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:16 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) syz_io_uring_setup(0x1005, &(0x7f0000000000)={0x0, 0xf1e9, 0x1, 0x2, 0x24b, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:33 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x27cd, 0x20}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00'}) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x2, 0x8, 0x0, 0x5, 0x2, 0x0, {0x0, r8}}, 0x8001) io_uring_enter(r0, 0x10058aa, 0x0, 0x2, 0x0, 0xfffffffffffffe91) io_uring_enter(0xffffffffffffffff, 0x46ec, 0x4e0f, 0x3, &(0x7f0000000000), 0x8) 04:43:33 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x0, &(0x7f0000000000)="10a240682a7ce8851388c9a7ae91f45f0ac7799d6d3cb3cfb8b00257379f1284da5795cec2c772eae17d64e677820ed8dd2881da33e6d763", 0x6, 0x0, 0x0, {0x3}}, 0x7fffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x20, 0x0, 0x4, 0x0, 0x1, {0x0, r5}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') io_uring_enter(r0, 0x5503, 0x8efa, 0x2, &(0x7f0000000180)={[0x6]}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0)) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x81, 0x40, 0x2, 0x2, 0x0, 0x0, 0x43000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0x2, 0x2}, 0xe6e, 0x10000, 0x7, 0x1, 0x54dd, 0xfffffffc, 0x40, 0x0, 0x80, 0x0, 0x100000000}, 0xffffffffffffffff, 0x3, r6, 0x1) 04:43:33 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x2, 0x2000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:33 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x701d, &(0x7f0000000000)={0x0, 0xe451, 0x1, 0x0, 0xa9, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r0, 0x1, 0x0, 0x0, 0x6, 0x1}, 0x10001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x1400}}, 0x81) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:43:33 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 04:43:33 executing program 5: r0 = io_uring_setup(0x2d3e, &(0x7f0000000180)={0x0, 0x703c, 0x4, 0x0, 0x260}) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000003, 0x4000010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/dev/char', 0x40080, 0x50) io_uring_enter(r5, 0x10058ab, 0xab7f, 0x0, 0x0, 0x0) 04:43:33 executing program 2: r0 = syz_io_uring_setup(0x7d02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10010, 0xffffffffffffffff, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66066c653000d04ea2cfe4501319f11bbc74b02d3a5f98c2891f0fefaabc519bbc6737057723d9f1e57df20383eadb6ed65cb61bf657481619bc3c0bd03b4f2049464ed1c02800720fc55be4606787fb9d7371ad3e2d5a8103fbc2905721026a81263f0121e115b2b64f0d7f65e220a9b3f41faaab"]) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x3, 0x0, r5, &(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x800}, 0x10001) [ 2951.067260] FAULT_INJECTION: forcing a failure. [ 2951.067260] name failslab, interval 1, probability 0, space 0, times 0 [ 2951.069713] CPU: 0 PID: 13601 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2951.071214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.073005] Call Trace: [ 2951.073581] dump_stack+0x107/0x167 [ 2951.074382] should_fail.cold+0x5/0xa [ 2951.075210] ? create_object.isra.0+0x3a/0xa30 [ 2951.076198] should_failslab+0x5/0x20 [ 2951.077022] kmem_cache_alloc+0x5b/0x310 [ 2951.077942] ? mark_held_locks+0x9e/0xe0 [ 2951.078840] create_object.isra.0+0x3a/0xa30 [ 2951.079789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2951.080893] kmem_cache_alloc_bulk+0x168/0x320 [ 2951.081889] io_submit_sqes+0x6fe4/0x8610 [ 2951.082831] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2951.083910] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2951.084958] ? find_held_lock+0x2c/0x110 [ 2951.085845] ? io_submit_sqes+0x8610/0x8610 [ 2951.086796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2951.087841] ? wait_for_completion_io+0x270/0x270 [ 2951.089016] ? rcu_read_lock_any_held+0x75/0xa0 [ 2951.090149] ? vfs_write+0x354/0xb10 [ 2951.091057] ? fput_many+0x2f/0x1a0 [ 2951.091938] ? ksys_write+0x1a9/0x260 [ 2951.092859] ? __ia32_sys_read+0xb0/0xb0 [ 2951.093855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.095139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2951.096396] do_syscall_64+0x33/0x40 [ 2951.097304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2951.098557] RIP: 0033:0x7f0301185b19 [ 2951.099463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2951.103839] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2951.105691] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2951.107280] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2951.108825] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2951.110379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2951.111923] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:43:33 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x232e805c790b699b, r4, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14000000) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) syz_io_uring_setup(0x5dd9, &(0x7f0000000080)={0x0, 0x3952, 0x1, 0x1, 0xa2, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 04:43:33 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd=r0, 0x4, &(0x7f0000000000)="e31e07ed3dbeb99d38a339155147cc12e8b8e7b958d12822e2daf48e313d127b03b26f7c86ea960a809480cc85bd48b52ab754b61575a406a4c7f6e619bf2ae75c5537485a2aedd2cf", 0x49, 0x8}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000000)=0xaf7, 0x0, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0xb20d3, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4dcf, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f00000001c0)=0x7, 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x1010, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6fd0, &(0x7f0000000040)={0x0, 0xf246, 0x0, 0x3, 0x1e3, 0x0, r1}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r5, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x9) 04:44:12 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x50400, 0x0) fchdir(r4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) close_range(r4, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x10000000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x2003}, r4, 0x1, 0x0, 0x1, {0x0, r5}}, 0xfffffffe) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r7}}, 0x80000000) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x1, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x7, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth0_to_hsr\x00', @multicast}) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x80000000, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x486a, 0xb15d, 0x0, &(0x7f0000000000)={[0x101]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 04:44:12 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0xfb, 0x4e, 0x40, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x9}, 0x1048, 0x7, 0x4, 0x7, 0x0, 0x3, 0x1, 0x0, 0x6, 0x0, 0x4}, r4, 0x10, 0xffffffffffffffff, 0x9) 04:44:12 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_POLL_ADD, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/202, 0xca}, {&(0x7f0000001680)=""/231, 0xe7}], 0x7}, 0x0) 04:44:12 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 2990.618734] FAULT_INJECTION: forcing a failure. [ 2990.618734] name failslab, interval 1, probability 0, space 0, times 0 [ 2990.621409] CPU: 1 PID: 13654 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 2990.623082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2990.624882] Call Trace: [ 2990.625460] dump_stack+0x107/0x167 [ 2990.626256] should_fail.cold+0x5/0xa [ 2990.627099] ? create_object.isra.0+0x3a/0xa30 [ 2990.628091] should_failslab+0x5/0x20 [ 2990.628918] kmem_cache_alloc+0x5b/0x310 [ 2990.629802] ? mark_held_locks+0x9e/0xe0 [ 2990.630702] create_object.isra.0+0x3a/0xa30 [ 2990.631655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2990.632770] kmem_cache_alloc_bulk+0x168/0x320 [ 2990.633778] io_submit_sqes+0x6fe4/0x8610 [ 2990.634726] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 2990.635805] __do_sys_io_uring_enter+0x6b2/0x1890 [ 2990.636857] ? find_held_lock+0x2c/0x110 [ 2990.637748] ? io_submit_sqes+0x8610/0x8610 [ 2990.638702] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2990.639755] ? wait_for_completion_io+0x270/0x270 [ 2990.640807] ? rcu_read_lock_any_held+0x75/0xa0 [ 2990.641816] ? vfs_write+0x354/0xb10 [ 2990.642635] ? fput_many+0x2f/0x1a0 [ 2990.643423] ? ksys_write+0x1a9/0x260 [ 2990.644246] ? __ia32_sys_read+0xb0/0xb0 [ 2990.645132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2990.646271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2990.647403] do_syscall_64+0x33/0x40 [ 2990.648214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2990.649327] RIP: 0033:0x7f0301185b19 [ 2990.650136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2990.654130] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2990.655791] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 2990.657342] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 2990.658903] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2990.660450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2990.662002] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:44:12 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3}, 0x40) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ftruncate(r4, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0xfffffffffffffff7, 0x0, 0x7, 0x0, 0x0, {0x0, r5}}, 0x3) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = signalfd4(r1, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) io_uring_enter(r6, 0x31d, 0xdc52, 0x2, &(0x7f0000000080)={[0x15]}, 0x8) fchdir(r11) syz_io_uring_submit(r9, r3, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r10, 0x0, r11, 0x2, 0x0, 0x1}, 0x81) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd=r4, 0x6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/200, 0xc8}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000180)=""/14, 0xe}], 0x3, 0x4, 0x1}, 0x292) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r3, 0x10000000) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r4, 0x0, r8, 0x2, 0x0, 0x1, {0x0, r5}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000000400)=""/193, 0xc1}], 0x3}, 0x0, 0x40, 0x1, {0x1, r5}}, 0x401) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x2, 0x1, {0x0, r9}}, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:12 executing program 0: r0 = syz_io_uring_setup(0x7d05, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x4000010, r3, 0x10000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x20010, r3, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x810, r0, 0x0) 04:44:13 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') mq_open(&(0x7f0000000000)='mountstats\x00', 0x40, 0xb6, &(0x7f0000000040)={0x4, 0x7ff, 0x80, 0x8001}) close_range(r3, 0xffffffffffffffff, 0x2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x3, &(0x7f0000000080)="6997c48cfd3df615bfa5587ce23a3f1f8448690b04dac21de7f28bfe4a7e76ae3bb4295c9162834c01e2f8e818fad1ff1ca131dc92d0b4673fd63ca4fc16c243cf22baab122f09b7a1970a542f3cb18018d8ad14381a7c08e4dc6e6647781153adb70deba09393", 0xfffffff8, 0x0, 0x1, {0x0, r8}}, 0x4) 04:44:13 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x10, 0x8, 0x0, 0x293}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r9, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0x9, 0x8, 0x80, 0x1000, 0x10, 0x1, {0x2, r5}}, 0x7) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r11}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:13 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x161001, 0x0) fchdir(r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x10010, r4, 0x8000000) 04:44:13 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x80010, r0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r10, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x8000000) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd_index=0x3, 0x40, &(0x7f0000000000)=""/125, 0x7d, 0x1, 0x1}, 0x9) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 04:44:31 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x800, 0x4, 0x8000}) r1 = syz_io_uring_setup(0x5951, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000c8bacdeb6cf6af5187e75d8d2e9950872d02bec50a8da9a8c7a57f2d13096e6649db62e9a5d7024ff339db256b9f9b964a1a452f5457bfbb522e2a7316953fb5bb1d00bdcf3ca545232b201da53e574b7b5cd7f2b29d5e203af2840485327f64039dd62dfdcfa3569299789ce5bd0a", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x881, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x6000, @fd_index=0x8, 0x8000, 0x3, 0x1, 0xc}, 0x9) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x622d, &(0x7f0000000040)={0x0, 0xa663, 0x4, 0x3, 0xd8}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x1010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x1}, 0x9e) io_uring_enter(r0, 0x10058ab, 0xf598, 0x3, 0x0, 0x0) 04:44:31 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "7f504fb3375df8a330cfd8e76fe10dc1a3b209a0681aad4a68db1210a0d43f2a98ccc84c93be725d977567bd99a7704a34c5c3db49aad8a7d63b0e79be37624e", 0x29}, 0x48, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0xc2da) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x4000010, r0, 0x8000000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x1, {0x0, r7}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) io_uring_enter(r4, 0x110058ab, 0x80d5, 0x0, 0x0, 0x28) 04:44:31 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x200) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3009.508775] FAULT_INJECTION: forcing a failure. [ 3009.508775] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.511747] CPU: 0 PID: 13701 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3009.513535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.515653] Call Trace: [ 3009.516347] dump_stack+0x107/0x167 [ 3009.517283] should_fail.cold+0x5/0xa [ 3009.518252] ? create_object.isra.0+0x3a/0xa30 [ 3009.519443] should_failslab+0x5/0x20 [ 3009.520428] kmem_cache_alloc+0x5b/0x310 [ 3009.521466] ? mark_held_locks+0x9e/0xe0 [ 3009.522508] create_object.isra.0+0x3a/0xa30 [ 3009.523642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.524952] kmem_cache_alloc_bulk+0x168/0x320 [ 3009.526133] io_submit_sqes+0x6fe4/0x8610 [ 3009.527236] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3009.528306] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3009.529336] ? find_held_lock+0x2c/0x110 [ 3009.530201] ? io_submit_sqes+0x8610/0x8610 [ 3009.531137] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3009.532163] ? wait_for_completion_io+0x270/0x270 [ 3009.533197] ? rcu_read_lock_any_held+0x75/0xa0 [ 3009.534174] ? vfs_write+0x354/0xb10 [ 3009.534976] ? fput_many+0x2f/0x1a0 [ 3009.535747] ? ksys_write+0x1a9/0x260 [ 3009.536557] ? __ia32_sys_read+0xb0/0xb0 [ 3009.537423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3009.538530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.539672] do_syscall_64+0x33/0x40 [ 3009.540465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.541543] RIP: 0033:0x7f0301185b19 [ 3009.542327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.546239] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3009.547854] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3009.549362] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3009.550876] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3009.552380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3009.553892] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:44:46 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x6690, 0xb4c9, 0x2, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x8580, 0x0) r1 = syz_io_uring_setup(0x1a1f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x0, &(0x7f0000000000)="49bf68772906ce1a9ed8cffabbacd0ad0cce1a4ac29f6826c809c38758c557d6aa014082cf3e2c978d5b690b054df7345400b6236c2364ffe11776b365872a04cf7ca048520ea9f6d1675292c8a80b5d58c788bf381c8deda9d6c8e80325f669ff6d43269a5b68e536d55954e95eddc56eec482650a0847d7719b7f33ca59a1cc39958306dd4e9da5ede3f3f361e1f37a9507a49feec4141dcb1086bdcfcaba7120f09b46e1e10cb2a", 0x8, 0x0, 0x1, {0x2}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 6: r0 = syz_io_uring_setup(0x207d01, &(0x7f00000002c0)={0x0, 0xbd3b, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x5, 0x8, 0x177, &(0x7f0000000580)}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x9, 0x0, 0x4, 0x486}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) r10 = dup3(r4, r0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r9, 0x0, r10, 0x2, 0x0, 0x1}, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000080)={0x0, 0xf209, 0x0, 0x200000, 0x60}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00', 0x61c4c0, 0x20) fchdir(r4) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000000)={@remote, @broadcast}, &(0x7f0000000040)=0xc) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 04:44:46 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='status\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000580)={{r3}, "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"}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r7 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r8, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r6, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r7, 0x10000000) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r8, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r9}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r3, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@rc={0x1f, @none}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x6) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3024.128595] FAULT_INJECTION: forcing a failure. [ 3024.128595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3024.131822] CPU: 1 PID: 13746 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3024.133343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3024.135146] Call Trace: [ 3024.135732] dump_stack+0x107/0x167 [ 3024.136535] should_fail.cold+0x5/0xa [ 3024.137383] __alloc_pages_nodemask+0x182/0x600 [ 3024.138388] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3024.139718] alloc_pages_current+0x187/0x280 [ 3024.140677] allocate_slab+0x26f/0x380 [ 3024.141544] ___slab_alloc+0x470/0x700 [ 3024.142379] ? io_submit_sqes+0x6fe4/0x8610 [ 3024.143332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3024.144463] ? trace_hardirqs_on+0x5b/0x180 [ 3024.145404] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 3024.146420] kmem_cache_alloc_bulk+0x1ec/0x320 [ 3024.147440] io_submit_sqes+0x6fe4/0x8610 [ 3024.148375] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3024.149464] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3024.150540] ? find_held_lock+0x2c/0x110 [ 3024.151455] ? io_submit_sqes+0x8610/0x8610 [ 3024.152403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3024.153458] ? wait_for_completion_io+0x270/0x270 [ 3024.154505] ? rcu_read_lock_any_held+0x75/0xa0 [ 3024.155515] ? vfs_write+0x354/0xb10 [ 3024.156310] ? fput_many+0x2f/0x1a0 [ 3024.157107] ? ksys_write+0x1a9/0x260 [ 3024.157934] ? __ia32_sys_read+0xb0/0xb0 [ 3024.158835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3024.159990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3024.161129] do_syscall_64+0x33/0x40 [ 3024.161942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3024.163056] RIP: 0033:0x7f0301185b19 [ 3024.163874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.167906] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3024.169570] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3024.171124] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3024.172674] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.174223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3024.175801] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:44:46 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x80000000}) 04:44:46 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000340), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7ab1, &(0x7f0000000080)={0x0, 0x9d66, 0x8, 0x2, 0x37f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) 04:44:46 executing program 0: r0 = syz_io_uring_setup(0x2935, &(0x7f00000002c0)={0x0, 0xffaa, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) io_uring_enter(r5, 0x1882, 0x3, 0x1, &(0x7f0000000180)={[0x1]}, 0x8) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x3c, 0x0, 0xeb, 0x1, 0x0, 0x2, 0x80, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x20c4, 0x6, 0x4, 0x5, 0xda25, 0x3, 0x9, 0x0, 0x5, 0x0, 0xbeb}, r6, 0x4, r4, 0x1) 04:44:46 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x23) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x8010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x0, 0x9, 0x7, 0x0, 0x4, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x62, 0x4, @perf_config_ext={0x3, 0x2}, 0x8001, 0xfffffffffffffe27, 0x5, 0xdb0886e5e61a628d, 0x1, 0x6, 0xfc01, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x8, r5, 0xd) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/104, 0x68, 0x4) 04:44:46 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={r7, r8+10000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1100}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x200000000000, 0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xa, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x10, 0xffffffffffffffff, 0x10000000) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0xb, 0x1, {0x0, 0x0, r6}}, 0x101) 04:44:46 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 3: r0 = syz_io_uring_setup(0x7d84, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_setup(0xb96, &(0x7f0000000240)={0x0, 0xd3a5, 0x1, 0x0, 0x3ca, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000480)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0x2, 0x0, 0x10000000, 0x4}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_io_uring_setup(0x837, &(0x7f0000000000)={0x0, 0xe129, 0x0, 0x3, 0xe7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000580)=""/250, 0xfa}], 0x2, 0x4, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = epoll_create(0xff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) fcntl$getflags(r0, 0x408) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r6, r0, r7, r8, r9], 0x5) r10 = dup3(r4, r3, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x40010, r10, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) io_uring_enter(r11, 0x4b85, 0x281f, 0x1, &(0x7f0000000040)={[0x100000000]}, 0x8) [ 3039.966604] FAULT_INJECTION: forcing a failure. [ 3039.966604] name failslab, interval 1, probability 0, space 0, times 0 [ 3039.969077] CPU: 0 PID: 13798 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3039.970542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3039.972316] Call Trace: [ 3039.972876] dump_stack+0x107/0x167 [ 3039.973649] should_fail.cold+0x5/0xa [ 3039.974454] ? create_object.isra.0+0x3a/0xa30 [ 3039.975426] should_failslab+0x5/0x20 [ 3039.976232] kmem_cache_alloc+0x5b/0x310 [ 3039.977085] ? mark_held_locks+0x9e/0xe0 [ 3039.977955] create_object.isra.0+0x3a/0xa30 [ 3039.978884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3039.979954] kmem_cache_alloc_bulk+0x168/0x320 [ 3039.980917] io_submit_sqes+0x6fe4/0x8610 [ 3039.981828] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3039.982880] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3039.983967] ? find_held_lock+0x2c/0x110 [ 3039.984824] ? io_submit_sqes+0x8610/0x8610 [ 3039.985734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3039.986747] ? wait_for_completion_io+0x270/0x270 [ 3039.988023] ? rcu_read_lock_any_held+0x75/0xa0 [ 3039.989000] ? vfs_write+0x354/0xb10 [ 3039.989779] ? fput_many+0x2f/0x1a0 [ 3039.990537] ? ksys_write+0x1a9/0x260 [ 3039.991338] ? __ia32_sys_read+0xb0/0xb0 [ 3039.992204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3039.993304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3039.994387] do_syscall_64+0x33/0x40 [ 3039.995186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3039.996260] RIP: 0033:0x7f0301185b19 [ 3039.997051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3040.000916] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3040.002510] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3040.004036] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3040.005531] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3040.007038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3040.008538] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:01 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4000010, r5, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:01 executing program 5: r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r4}}, 0xffff) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r5, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:01 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000040)={0x0, 0x0, 0x4b29ab6fc5784982}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x30, r0, 0x8000000) r5 = fsopen(&(0x7f00000000c0)='nsfs\x00', 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r5, 0x0, 0x0, 0xc8, 0x8, 0x1, {0x0, 0x0, r6}}, 0x9) creat(&(0x7f0000000000)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:01 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x10000132, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x80000000}, r3, 0x1, 0x0, 0x1, {0x0, r7}}, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000240)={0x8, 0x9, 0x40}) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:01 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 04:45:01 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x2a28, &(0x7f0000000000)={0x0, 0x9fe9, 0x14be5f71d7a5be1c, 0x1, 0x307, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12060, 0x1, {0x2}}, 0x10001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:01 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x1}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x200) pread64(r4, &(0x7f0000000080)=""/56, 0x38, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = getpgid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r6, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x15, 0x8, 0x1, 0x0, 0x1, 0x80010, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x4000, 0x588, 0x10000, 0x7, 0x9182, 0x3010, 0x2, 0x0, 0x5, 0x0, 0x7}, r7, 0x6, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:01 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1487, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:02 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) ioctl$FIOCLEX(r0, 0x5451) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)="6371d6e3c069f080dcdf79e81a7f857d3cd4e37489730e", 0x17}, {&(0x7f0000000480)="ee5ebfe7d7151c06b284d8e8066695aed5fc39c05f5cbfea2ec0d317c873b229c95edb3bc0b050d6a8f65b256e43aa1e326cd4155f96b4afebdcb6c7c254ec359c159227fb31cae5122cf2d6c2939e10a3f80ab5ce7fb26fcd75f7be238564dfbb1f284a4517916f70539d0b5ef818c11d008a42c761981f89f1935aeded75b0632ba8ea83c312b62ac47ddcd9ded8d03e8a5fe188a4de9311ad07ddb34006c7f6aea128c92b54da7c151b6df33420edd8c778cf136d33d7f087d1", 0xbb}, {&(0x7f00000003c0)="6c6312903d655c68978c6018c62d5395c8ffa6548c3c7fcc6c116ac9b61b1547e2a14cdfc5b528dba709f9942a30fbd6bb50f543ebf72b5c72e7e62072bef0ee410aa6a057a498108be9a87a738478eaaf6e26659960fc9cb9e9beafe70e3528aa820b5fd47f433dfe4a00776c", 0x6d}, {&(0x7f0000000540)="2fdecc25e752326b113bc417fbb5002bbe828ac37fd216ddbe8e22543e4e6c9724bef27e18e8135a521642089612c75a6558e13c9acb4844e7d0a662267d035c5e9f91419682804f35dff8ca2e8f4513779ce0eb7c837e78a91ffd876af312b8c282255a5618f7947c77e0d21d5bafa3f8bad0bc854ea2546fce59ba031ff13b02589bdc1f633ba5ff2b94", 0x8b}], 0x4, &(0x7f0000000940)=[{0x108, 0x104, 0x77, "588ae10ab6eca5be10818cbe95cf51577b2f22f3336c89787db6accab887d8f472225a924d0ef28de6e4005e63c4ba14a138bf98d308b87c0086e664df9e2d3870ca2850b19a50c07790c76faba3aabe6513f4c50c0f01ce2e96521f7e2ea218b04b182bc810e2a3431768aabba7f1e28581d3b7e67a0c72f8500d72db7885e557fc0630135304b4aebe0c6a96dce81f8581eb36dc0a376aa443045052b1a203acc74d197a52121cb266effd3060059a1af19d785d093b541afcfa27072e1691797aeef1b68528fe6d7d5633d126ded654f09cd2ef32aa09b500db1a322894fbb34f2c48ffed5e98b881514ac27a8ea4d3a8dfee4d"}, {0xd8, 0x10a, 0x6, "26647bcd15707f31f8f49ff48bb2946811305fdf628fe2ebe4cef82b9c08eab96b0f81a7867c1bf80cfbd10b3dc803dd98356e971be9a279ff0dd353d5e93c880cc98ab79e3629bca5b2ccf4f591437956f9d19c6c6818991be610172178a3322a69772ede7f96f4cf6c461417d11d9d1f230f847914855e062967231f97ab30352cb57cd40db01552d3c1800997efabd91a7f517cfd5add766f2d4082aa8f0f3c548f39fb2b158825b2fc87a0b7ac7cae02a9e7ee10eca9501947fb69680fd35e3af9"}, {0xe0, 0x10f, 0x1000, "09f0c79171bc6e888717b9d9c14be83a01bcc46cbee0ddb0a095ac9cd8bc973be5703a54a594d84ea7ba98b5256a9f6ace7dc302f5adff0e46a6b4b1ac0d3aadc03e0817906c9d11ec90a908fe5f164cdff787baadc16240d163a4fd1f674e3954bb9ede6675a4a699f049d5ab70c55bec486f89e33323bf63817c6187d360ac779d3cd78cc4f2f9a4d1d2b5d532f92ff0bf39c9855aafb8e803d8cf8d9488ca67d7abe761ec36dff154375ab0067bac8e98f06f9075456fae26db7afc091ed50f42aff6e2446d0581"}], 0x2c0}}, 0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r11, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0xffffffffffffff5e) 04:45:02 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000000)={0x0, 0x254, 0x0, 0x0, 0x312}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x5}, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x92e) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:02 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x2, 0x4007, @fd=r10, 0x101, &(0x7f0000000340)="40c0a978a3e4f79ea7c3f2c9be252b35922ff6793548b5245f2cfec67d14115e0557b93c450ad033758af05b", 0x2c, 0x1d}, 0x1) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:02 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x6e36, &(0x7f0000000000)={0x0, 0x3adf, 0x8, 0x2, 0x11e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f00000001c0)={r5, r6+10000000}, 0x1, 0x1}, 0x101) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) dup(r7) 04:45:02 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x70, 0x200000}, 0x400) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0xdf3a) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x81, 0xfc, 0x0, 0x47, @local, @mcast2, 0x20, 0x7, 0x9, 0x2}}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000400)={@remote, 0x15, r8}) fchdir(r6) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f0000000000)="30bf60eaff6d75d15670546b5c6ba9b07536294d7adf8600e357", 0x1a, 0x24000800}, 0x81) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r10 = accept4(r4, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000180)=0x80, 0x800) fcntl$dupfd(r9, 0x406, r10) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:02 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x8000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="014900000000008001002f66696c6530009c4ab0277ac97058e9a5df9a1bda5052ee0340b070"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x1, 0x6, @local}, 0x10) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="cf1f569f1e28ff7736e9d065745653789b9cbddc3ca844aae7a262737b841991ba7414ac1f7c43435201ed24e2f7ec7db436ef1de9ea437205fe04731683e2afb078d167ac0b6f80a369c8643571c251bb5aafc7aecd9710ac8dc5dcb3daa6e992a64e074e7cdbd134470bf6f1fcb4fedad451b320d3ec04564cba1b96f353a71bd6bb51dcce638af452e89fdbf5794df99e2aac32eae3d83711ba5cf0453882a363170c940c8008249cddea13a81e18e12e78144d20ad05462c8dc5b44d07218bfd85da28854e3ec489a5cb1de9e1", 0xcf, 0x20, 0x1}, 0x1) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_io_uring_setup(0x3956, &(0x7f00000002c0)={0x0, 0x1867, 0x20, 0x6, 0x7fffc, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x50, r1, 0x8000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4, 0x1000) 04:45:18 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) quotactl(0x5, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)="830eac002493c867f60c6511596092e45ffc4026b62a") r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x12, r6, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1, 0x1010, r4, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) io_uring_enter(r7, 0x5a72, 0x8f1c, 0x2, &(0x7f0000000240)={[0x9]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 04:45:18 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FICLONE(r3, 0x40049409, r4) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x2d74, 0x84c5, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x80800}, 0x8001) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r7 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r11 = io_uring_setup(0x6d65, &(0x7f0000000180)={0x0, 0x2a92, 0x8, 0x1, 0x63, 0x0, r7}) io_uring_enter(r11, 0x5710, 0xf0f7, 0x4, &(0x7f00000000c0)={[0x7]}, 0x8) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r9, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r4, 0x0, &(0x7f0000000040)="47ed9fb9595e6884d0c5aa0cf9d45202c95caccd59b419f57c5318a41e3135c3b21f303d3a27105ae927ae76d1a91c6cecdb4580fc32ad522823", 0x3a, 0x1}, 0x3e2de645) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x8, 0x2, 0x6, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) signalfd4(r5, &(0x7f0000000000)={[0x80000001]}, 0x8, 0x80800) ioctl$int_out(r5, 0x5460, &(0x7f0000000080)) [ 3056.998307] FAULT_INJECTION: forcing a failure. [ 3056.998307] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.001300] CPU: 1 PID: 13870 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3057.002778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3057.004542] Call Trace: [ 3057.005101] dump_stack+0x107/0x167 [ 3057.005873] should_fail.cold+0x5/0xa [ 3057.006686] ? create_object.isra.0+0x3a/0xa30 [ 3057.007671] should_failslab+0x5/0x20 [ 3057.008472] kmem_cache_alloc+0x5b/0x310 [ 3057.009335] ? mark_held_locks+0x9e/0xe0 [ 3057.010210] create_object.isra.0+0x3a/0xa30 [ 3057.011138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3057.012239] kmem_cache_alloc_bulk+0x168/0x320 [ 3057.013226] io_submit_sqes+0x6fe4/0x8610 [ 3057.014149] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3057.015213] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3057.016244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.017347] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3057.018293] ? trace_hardirqs_on+0x5b/0x180 [ 3057.019215] ? io_submit_sqes+0x8610/0x8610 [ 3057.020132] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3057.021075] ? finish_task_switch+0x126/0x5d0 [ 3057.022023] ? finish_task_switch+0xef/0x5d0 [ 3057.022949] ? __switch_to+0x572/0xf70 [ 3057.023840] ? __switch_to_asm+0x3a/0x60 [ 3057.024697] ? __switch_to_asm+0x34/0x60 [ 3057.025563] ? __schedule+0x82c/0x1ea0 [ 3057.026417] ? io_schedule_timeout+0x140/0x140 [ 3057.027389] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3057.028353] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3057.029487] ? ksys_write+0x1a9/0x260 [ 3057.030303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.031414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3057.032506] do_syscall_64+0x33/0x40 [ 3057.033297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3057.034382] RIP: 0033:0x7f0301185b19 [ 3057.035190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.039086] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3057.040708] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3057.042205] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3057.043716] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.045211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3057.046697] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:19 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x45}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4000, @fd=r0, 0x10001, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1, 0x14, 0x0, {0x0, r11}}, 0x434) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r12) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0xa, 0x0, r11) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x3a1a, &(0x7f0000000000)={0x0, 0xabed, 0x4, 0x2, 0x68}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x3ae2, 0x1, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000040)=[{r3, 0x4}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x341]}, 0x8) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x27ae, 0xff, 0x3, &(0x7f0000000140)={[0x4]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) fallocate(r0, 0x1, 0x0, 0xcdc) r3 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1028, 0x27, 0x0, 0x70bd2c, 0x25dfdbfe, {0x15}, [@typed={0xc, 0x4d, 0x0, 0x0, @u64=0x8}, @generic="ee4e96383c", @generic="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"]}, 0x1028}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x13, r0, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x8000) syz_io_uring_setup(0x694d, &(0x7f0000000000)={0x0, 0xe6ca, 0x0, 0x3, 0x157}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r10, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f00000001c0)={0x6, 'bond_slave_1\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x40, 0x4000}, 0x31) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:19 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x310}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = accept$inet(r4, 0x0, &(0x7f0000000080)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/tcp_cubic', 0x644801, 0x30) fchdir(r9) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r3, r6, r7, r8, r3, r9], 0x6) 04:45:19 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) [ 3057.687023] FAULT_INJECTION: forcing a failure. [ 3057.687023] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.689605] CPU: 0 PID: 13908 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3057.691097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3057.692914] Call Trace: [ 3057.693489] dump_stack+0x107/0x167 [ 3057.694281] should_fail.cold+0x5/0xa [ 3057.695106] ? create_object.isra.0+0x3a/0xa30 [ 3057.696114] should_failslab+0x5/0x20 [ 3057.696937] kmem_cache_alloc+0x5b/0x310 [ 3057.697811] ? mark_held_locks+0x9e/0xe0 [ 3057.698689] create_object.isra.0+0x3a/0xa30 [ 3057.699656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3057.700769] kmem_cache_alloc_bulk+0x168/0x320 [ 3057.701769] io_submit_sqes+0x6fe4/0x8610 [ 3057.702706] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3057.703803] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3057.704848] ? find_held_lock+0x2c/0x110 [ 3057.705734] ? io_submit_sqes+0x8610/0x8610 [ 3057.706675] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3057.707742] ? wait_for_completion_io+0x270/0x270 [ 3057.708789] ? rcu_read_lock_any_held+0x75/0xa0 [ 3057.710078] ? vfs_write+0x354/0xb10 [ 3057.710888] ? fput_many+0x2f/0x1a0 [ 3057.711686] ? ksys_write+0x1a9/0x260 [ 3057.712519] ? __ia32_sys_read+0xb0/0xb0 [ 3057.713414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3057.714563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3057.715720] do_syscall_64+0x33/0x40 [ 3057.716535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3057.717653] RIP: 0033:0x7f0301185b19 [ 3057.718467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.722497] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3057.724183] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3057.725730] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3057.727308] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.728861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3057.730419] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:19 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x10000000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r3, 0x0, r7, 0x2, 0x0, 0x1, {0x0, r4}}, 0xfffffffe) syz_io_uring_submit(0x0, r2, &(0x7f00000018c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r9) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r10) sendmsg$nl_generic(r10, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0x40, 0x12, 0x20, 0x70bd29, 0x25dfdbff, {0x6}, [@nested={0x2c, 0x5, 0x0, 0x1, [@typed={0x4, 0x8b}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x62, 0x0, 0x0, @uid}, @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x1f}, @typed={0x5, 0x48, 0x0, 0x0, @str='\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet6(r9, &(0x7f0000001580)={&(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000340)="032a76ea8ab40fa41d2ff2ed0449a8c0899ce1f843e37c4572abe137a1e7ff9d10e9f8cefd5b630d6d48363dc5313cf03e4b7043fdf813e35a9da198ee271b3702bb898b24d1d27400b3721a0fb9c41659fb3ecb5e5830c395078aee2ddd7ae16a84d0b524a7d8415bdc0edd4d6b08b146f117b700e13baf85de1c301b34f59d5343", 0x82}, {&(0x7f0000000080)="a6de55909f7ce795b255faa35185615b4eb7e86d8902b3f5695b0ddd1b34cccf67b04b42dd287784848c80bd0d176b50fa638f2fc959cd826d31bb236d437edc2fe6da87", 0x44}, {&(0x7f0000000180)="1e338e81c3a9f799d4a5c1971089043f80b9d7367062e3bd21e4da6e17596c3dcdfcd1afd66d94b0b89a07021821e0dcbdac6b96c49256817c80917eb35d0f5169b0b3a927223a57917b6503e1a2949a3366fe94a5a903484feba831c41f82e7ba3d2f585e973fb7", 0x68}, {&(0x7f0000000240)="81d1cd8e8027a4967633faddd57d8ae4069a54b257f2454bad5c0a6f132f7fc203dfaecfe238d8fcd2ad7c2ef57c424ec7d0e421cd5569d8c910ebd23a1a938578caa1e4bbfae9ac6bc1811990884c9c88c437064bb5a7460f6243ae29a6b78679af155828", 0x65}], 0x6, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x30}, 0x8) 04:45:19 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x10000000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r3, 0x0, r7, 0x2, 0x0, 0x1, {0x0, r4}}, 0xfffffffe) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x7, 0x8, {}, 0x0, 0x8, 0x0, {0x0, r4, r0}}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r8, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={r9, r10+10000000}, 0x1, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) ioctl$FIOCLEX(r11, 0x5451) 04:45:19 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0xdebc, 0x0, 0x0, 0x153}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x280, 0x232) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x100, 0x1, {0x2, r7}}, 0x2) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x271a, &(0x7f0000000000)={0x0, 0x404a, 0x1, 0x0, 0x209, 0x0, r11}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:45:34 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 04:45:34 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[r0, r6, r7, r4, r0, r8, r0, r0], 0x8, 0x0, 0x1}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r4, 0x0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="9943eea2ce7d30b00d013eeb6c0d7c5d9ce49a0a7eb2f2b38ceaa9d44d7335b144afa3f69a1422e49f61c16a086ff2273fd53f3a59f219271477f92a4d10e5ee7cadf4bc144cad4ac431be2b85f54141d5177567537718760cbee6a6c070", 0x5e}, {&(0x7f00000000c0)="1b8e5101b89f40976661", 0xa}, {&(0x7f0000000340)="98c125be2244d4fec3b04da3d8d395cd04c7b9d3dbbe692b899e450b91eae06be965ff2166dd67c8d19127851915d70b1e339faad83c2a91bdde1e77e022ba40397ecc238358805fd88c9cd7c8f0a9c63599324cce17d20f9282c84b6c83e33cc21f0304647c513463bc4cea747e7b2bf5cef9a2d11cde325ac5c400a50abd08971801325c17ae0a57395d86a6be215fd2ac8c287e1a1f58d5ba8eed46bd9646e475e12ed922bb6b104eb53b0890b25f245c37adf1f789f63eb9b1ca4bb0b07d7faf06e4a64717805cea4a016d", 0xcd}, {&(0x7f0000000180)="e13639d4a4d8a3306a40273f9ad214cd7f12f73baaa5ed2e7ef716f364c127dd6195db46d9e034f807e2ba5ba3ddb4990e91285f5f4c1066ba14ccb448e7b6d5197a5b76e4614637f949f4176dcb", 0x4e}, {&(0x7f0000000440)="5086e92eb5a0ad62a1632ca754b800a77aaff7fb90725fdcd458ef688e4752fc298169d0422d0e6763d41003a57784e5ddbc07d20ad0f166c0c71993f55923947780fe66ef9e3d9b8b268d38a8be8626703bb8e1b9642143b5bebce2f9dc726405eeb5b389d95eeb67b823135ea054823524d02cf1fe7bbeddc8e36d4d5db3db2cf2c4ceda60536948174a9ff30d82aec954515dd4128bbfdecb962a84375167f74954644ae62f9805f71864b458e600314d66681439e8d64ac73dcf2e4c2d60292139bdb853ad8599509573dd19102b1955", 0xd2}, {&(0x7f0000001980)="221ddf8cf854ded1cea43afe797551579327ab93cd6330f050ea4b5240cb62fa60334a5a758e1e5156a8fc594f9ab13d54605e0dc0ee42badb19e04ffe7ba543024d0628d221572d49f9427c91255f4e088bd6e9933f9529fe4b6e074510bbd2facc4ffec9362fe97210460b9bdf4ca60893a1b4649fed294188007dbc4e6be0f48a4dc8d1af4d272e6f98f6fbf49c1408899fb57e87f773df4334e94b8fc4d5d2027d", 0xa3}], 0x6, &(0x7f0000000600)=[{0xa8, 0x10c, 0x5, "b8781814a8ec2592a195498136b36b3bd8d1b905fba603afc6f1de1b973d0adf9945ce9ed9d24f58a829ac51d7075bb490d31614934d0e79c1dca0e9f2d6329483cd8330cfa1b1ceb9ceae0976480bc93f15a6b02c2061991b70437c41f55c059d2221bdf0ff0164a97d161e912233d16efcf18e1ed9ec529f53dc112867138797530a24fd860c472f0899e4336c94c700e59131f30072"}, {0x30, 0x1, 0x5, "13e06dcf9a5137e712797abc1e955be3c5289f38df352ef473"}, {0x40, 0x11, 0x7f, "d78aa820927281440e1a37e37e0aab8e1dc36b0594470f6d9044361c4ac30cdd9666a45dcb38b5e11cb3121d"}, {0x18, 0x108, 0xfffffffe, "dd95"}, {0x70, 0x111, 0x8001, "7e7ec83f0d3f0c3019bb229c1d8e3208a95e0a0c5aa466190b0125286d7f091fec83fa121ae23ebc5384b78f572ab2f99db898cf7548862d3aa90acd0ce0b17ade857efcbfcc2c8c0a5640dd6ab07232d04c2b06c7ab39f11914310f"}, {0x1010, 0x11, 0x3, "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"}, {0x78, 0x119, 0x7, "2d9ca017f9bab73e3c8d9c783a261076c10c5baa225a2761312479f47c0e4dbdf250628da3cbf0c388e3d93cc795e656ae6d4b92b4e00ced9f8b7ded4a8b65a95f99b81fa3ba8338bea8f9db6a89ea8107dafdde209a3a133af15a82642d88fc9c6f"}, {0xf0, 0x381, 0x0, "2a53f25b4b9218d2c49771f6045b2897815319fbb2482560e8b758de8262e082eb6764893974f30f5c8f4e85f457d67537f2e4b577dec600e1b1f092865bec34640274a92ccb6e0780cd398a4c08d59e790347be2efd16eab68551e25573bfe2dccf20a8dc93c6c015b3773e3665af5c7f8dc1036a447d4736d398bdd87f5f05698a96a628c344ef1d0b34fee4865e5d4d70547561198d5a2692f6b559a6120950fd6de3e320fd353fcc792118f2f546d2e2272b81bfcac68b5561d67984105d850d75510adda6c40ad06680f3edd3bf626c356221a06c6b3ff2091d9179"}], 0x1318}, 0x0, 0x20000014, 0x1, {0x0, r5}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fchdir(0xffffffffffffffff) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r7 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r8, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r6, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r7, 0x10000000) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r8, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r9}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x4, 0x0, 0x1, {0x0, r9}}, 0x5) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x100010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}, 0x2002) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x0) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x20000008) syz_io_uring_submit(r7, r11, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0xa, 0x7, 0x0, 0x80000001, 0x1, 0x0, {0x0, r5}}, 0x1) r13 = syz_io_uring_complete(r7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r9, 0x4, 0x3ff, 0x6, 0x6, 0x0, {0x2}}, 0x7fffffff) close(r13) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x400, 0x1, 0x0, {0x0, r5, r4}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3072.261288] FAULT_INJECTION: forcing a failure. [ 3072.261288] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.262734] CPU: 1 PID: 13931 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3072.263618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.264691] Call Trace: [ 3072.265054] dump_stack+0x107/0x167 [ 3072.265536] should_fail.cold+0x5/0xa [ 3072.266039] should_failslab+0x5/0x20 [ 3072.266542] kmem_cache_alloc_bulk+0x4b/0x320 [ 3072.267137] io_submit_sqes+0x6fe4/0x8610 [ 3072.267710] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3072.268364] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3072.268991] ? find_held_lock+0x2c/0x110 [ 3072.269526] ? io_submit_sqes+0x8610/0x8610 [ 3072.270103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3072.270724] ? wait_for_completion_io+0x270/0x270 [ 3072.271367] ? rcu_read_lock_any_held+0x75/0xa0 [ 3072.271960] ? vfs_write+0x354/0xb10 [ 3072.272442] ? fput_many+0x2f/0x1a0 [ 3072.272914] ? ksys_write+0x1a9/0x260 [ 3072.273405] ? __ia32_sys_read+0xb0/0xb0 [ 3072.273934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.274630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.275308] do_syscall_64+0x33/0x40 [ 3072.275815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.276475] RIP: 0033:0x7f0301185b19 [ 3072.276957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.279335] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3072.280314] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3072.281249] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3072.282163] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.283093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.284033] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:34 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000240)={0x3, &(0x7f0000000180)=[{0x9, 0x7d, &(0x7f0000000000)="cf4702a64d33f014aaeee3a0a130c0a5d659d8a7b531fbb8caa88224fba3a7350ce76474979ca522d080f98b4a63554f6c7f23fa6a73e5e6b640be89ee7aece514c31a8ff8b64f8f08c422dade9066d8cbc2a0fbd4063f8e6e88212668b1e820d893e70d445961e6a8f4d89ef1252e9d217ec0d0813b0205d1ad9ce606", 0x1}, {0x7, 0xf8, &(0x7f0000000340)="09d824dac81ba38bd0bc1a5ca440ab6293eb5ce17e4fe5ca00fd6023a9ed6e6b1c1bcb39071abfdaddd0faf84d329bb7f578773dd3b6023416fb7cf5130ef22539a509e48e4996c50f362903cadf413365e3f6970bb2e4a93f52950d51cd02cff333cfd0df067fe7fe16c89e3671fcc23996cfc122ae04016a01bbe12a05069744481a0a42877064298430682b47b829406b672b5992fb3028d7c21c3326f86f9f7720dd43292920c9eb78c8817123d2ab38dbffe39298d3726cbb2cdd71ddd7377b80d85babbc781464e620cd7cdba2cc608aab30051b891cc12d1cb2163eca73cf6b2ccf264a130cc15ca518e7ae4264f10be0cf33d60b"}, {0x8, 0x4d, &(0x7f0000000080)="9dccb41616aa18f37d31aa026466b9d14e258d135d847e2ee7ac09709cc927926ad60653ae9f59e7cb53b522c3222b2484bca083d0f5500ef342722354d155fea7f904b8e00a4d53bcc3ec4a07"}]}) 04:45:34 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 04:45:34 executing program 3: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x442, 0x0) r1 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x188) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x8600, 0x0) read(r3, &(0x7f0000000500)=""/161, 0xa1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10, r4, 0x8000000) syz_io_uring_setup(0x3def, &(0x7f0000000000)={0x0, 0x382e, 0x8, 0x3, 0x35b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2007, @fd_index=0x9, 0x8, 0xbd, 0x1, 0x1, 0x1, {0x2}}, 0x5) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3072.588758] FAULT_INJECTION: forcing a failure. [ 3072.588758] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.590139] CPU: 1 PID: 13958 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3072.590922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.591884] Call Trace: [ 3072.592191] dump_stack+0x107/0x167 [ 3072.592611] should_fail.cold+0x5/0xa [ 3072.593054] ? create_object.isra.0+0x3a/0xa30 [ 3072.593576] should_failslab+0x5/0x20 [ 3072.594017] kmem_cache_alloc+0x5b/0x310 [ 3072.594486] ? mark_held_locks+0x9e/0xe0 [ 3072.594952] create_object.isra.0+0x3a/0xa30 [ 3072.595459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.596054] kmem_cache_alloc_bulk+0x168/0x320 [ 3072.596578] io_submit_sqes+0x6fe4/0x8610 [ 3072.597071] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3072.597651] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3072.598207] ? find_held_lock+0x2c/0x110 [ 3072.598676] ? io_submit_sqes+0x8610/0x8610 [ 3072.599190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3072.599749] ? wait_for_completion_io+0x270/0x270 [ 3072.600306] ? rcu_read_lock_any_held+0x75/0xa0 [ 3072.600835] ? vfs_write+0x354/0xb10 [ 3072.601265] ? fput_many+0x2f/0x1a0 [ 3072.601681] ? ksys_write+0x1a9/0x260 [ 3072.602119] ? __ia32_sys_read+0xb0/0xb0 [ 3072.602583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.603185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.603790] do_syscall_64+0x33/0x40 [ 3072.604216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.604802] RIP: 0033:0x7f0301185b19 [ 3072.605239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.607338] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3072.608208] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3072.609031] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3072.609851] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.610659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.611483] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:34 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000000)=""/10) 04:45:34 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:34 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2}, 0x60f) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x85010, r3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x2) 04:45:34 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) [ 3072.901489] FAULT_INJECTION: forcing a failure. [ 3072.901489] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.902840] CPU: 1 PID: 13972 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3072.903642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3072.904590] Call Trace: [ 3072.904900] dump_stack+0x107/0x167 [ 3072.905322] should_fail.cold+0x5/0xa [ 3072.905763] ? create_object.isra.0+0x3a/0xa30 [ 3072.906285] should_failslab+0x5/0x20 [ 3072.906727] kmem_cache_alloc+0x5b/0x310 [ 3072.907194] ? mark_held_locks+0x9e/0xe0 [ 3072.907672] create_object.isra.0+0x3a/0xa30 [ 3072.908175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3072.908763] kmem_cache_alloc_bulk+0x168/0x320 [ 3072.909292] io_submit_sqes+0x6fe4/0x8610 [ 3072.909788] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3072.910359] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3072.910917] ? find_held_lock+0x2c/0x110 [ 3072.911395] ? io_submit_sqes+0x8610/0x8610 [ 3072.911897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3072.912450] ? wait_for_completion_io+0x270/0x270 [ 3072.913003] ? rcu_read_lock_any_held+0x75/0xa0 [ 3072.913532] ? vfs_write+0x354/0xb10 [ 3072.913964] ? fput_many+0x2f/0x1a0 [ 3072.914382] ? ksys_write+0x1a9/0x260 [ 3072.914829] ? __ia32_sys_read+0xb0/0xb0 [ 3072.915296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3072.915901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3072.916495] do_syscall_64+0x33/0x40 [ 3072.916923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3072.917510] RIP: 0033:0x7f0301185b19 [ 3072.917935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.920044] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3072.920919] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3072.921739] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3072.922559] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.923389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.924207] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:50 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 04:45:50 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x75cb, &(0x7f0000000000)={0x0, 0x960, 0x2, 0x3, 0x298, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x4, 0x10001, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x10000000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r6, 0x2, 0x0, 0x1, {0x0, r3}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="13ec90a5412e3c76bb55a011dbb4f7f17f7653a51aff19a69227cca4fad3baf774087db51913662a6ef5d37d4ea9814758b2f66f115f75e9dc99b6edd2b20c2b92125e9417cc2977ed2bc07887b547ba8629520470ef2f5dcb54cde0f7be7ff9a5e8ccc8795439a18927a4da978c508d4f25f5db2082c63fb5cf608cfb9adbbbe75e568cd42e17edef71eb1723381269a5a5421c67fb00625799004ad244a5b8bc70fd2087259b7a3385cdafd415f47d60d69e3385cd9ff8ef35aa19bc0f421c8c3f395d650475cc2870f814ac08e8240573360b1e0ca9840968c7", 0xdb, 0x20, 0x0, {0x0, r3}}, 0x7ff) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') dup(r0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x692c, &(0x7f0000000080)={0x0, 0xb0b5, 0x20, 0x2, 0x392, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x2}, 0x9) creat(&(0x7f0000000240)='./file0\x00', 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r7, 0xa667a000) 04:45:50 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x10010, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r5, 0x0, r0}, 0x6) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0xbc4, &(0x7f0000000000)={0x0, 0x445, 0x4, 0x0, 0x33}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x400300) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8010, r8, 0x10000000) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000096c0)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)="f9b67322cb62744782bdd86e764887d0ceebbb4c3cd71e4b02cb9de08f0d66453a2932cffff1cc6378a7d08813ec4037fbdd67", 0x33}], 0x1, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x120, 0x40}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000fc0)="c7ae57657aa798667f7960528090bf9e2214c68c0bd776bb996d11e4d8c4a36cf2c3d2b507c9c09a67f6267b30db38bfa8dd8d81bb9c8287c7128d051f3ff47bdd024a66f646b2f5e32eb2665a035574804b414775d514815f1a3cfcd854d54495126fb7ae64e3e04fb2a89f1717d7ff71", 0x71}, {&(0x7f0000001040)="cc811c5ab94d20690703f1e84b737fd67480ae5a0d22fbe3f0f2b6c68526e426a640921f4c0192d3e74b8241ad8e94b91acdadda223428d3860637f6d4e5944c0f5d881ff6acae96e97eac872635e73e5eddcadc71cb327092459aeeb7", 0x5d}, {&(0x7f00000010c0)="d5a8b21b86a021a8ebfbcc3a59c21d7b7c4172dca0379c5c45185fdadcc140b28266c49b55af", 0x26}, {&(0x7f0000001100)="9ee7083104bca2752bf74164b7698d3245a44f594258d2b6f1d52bd856bc308edc55da96cfca19665a163e4617add768d7acb7b8b3a600d8ae8a44ca8dc493bda83aa17e62d77f91edaa3550c2acd1d182e2bf539e6748f41ee4430488da48249cbe0ace70e12ad08cc85d284649694521ded14b6a1ed2644dbed0c855023efe6d3a2ae20acc7aa91b1c5a2335dcc5e5cedbd10986ce041607f3b945591196629f97eb9658a3bce18e5c9c4f21986d5b32dd74af3a4d01d171db3e8c2055e6a1", 0xc0}, {&(0x7f00000011c0)="896340a226def63897e02ceb04dd7d73294e90ea1d3326d5fa24d1546743c0f119bcf5814f02c99cd7ea26fa25097d816013d93d436ae6e7b3b20ea30bc00334981967bc39272376f6d0d7693f9b4df22fd8808aa956802dba1937627ca2445217ac7312db00053ae7523e0f66a61496", 0x70}, {&(0x7f0000001240)="7d5674c4213d58398417e21b53525320d88d6371f9f5f1c8f1df2ca8014cfb1e829c50a647a50af96ba0daf3aa6dab03e1f08c8463bd65da5ad8e33be11f94fded01464762ca392b212de98dd1951d20269c24e726c7eed13219372ce3076f8c88162ba3e46cb13afb05da4ab8d354ecc54bc8fcd6e8f7c06c99b7141837d8a01892f510bbb68b1d71c2307672861ff2fc66b5522bf034c06cfd78532f5be1c00c234339b085b74a34eef5c6c9e7a924046bcb8e34f8f607c2461e0a4517fde29bc1e222169d6a", 0xc7}, {&(0x7f0000001340)="a74a2a0ff5ccf30bf144091bdb8694a942b7d7192c66771ac1471922a467c1e8eb2374281716de677332f2f8ec89caa71691fb19afd349bb8e1b8cda09fb2a0a33e16e590e6a", 0x46}], 0x7, &(0x7f0000001780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x40000}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001900)="41389c354c667c7d0048c054efe16f5c1e127a169b32e73afd1cd04f9e7f1f80b3eaf6d6a26e71b5bf665c18f418c1d6ade17a8426c67e71b7692a4cc7d1a694f179d5967dc2fd7b57dd93a80d94e7a9e1cc53f56b23271b5df9697689d26d3ac82158d319ec9580d3bb4164b9f0223f641f3aa3936a3407daeb7b23b3eea3be750b0a2e046fc0cc530b099614b375a48a077d2bb986142ba735bd1ed5df2a1cb3fc55a61831cb4b92ff2c4581e02ac5dd33b2f54b342a", 0xb7}], 0x1, &(0x7f00000048c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r8, r8, 0xffffffffffffffff, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}], 0xa8, 0x400c1}}, {{&(0x7f0000004980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000004a00)="49191844525110165d51a1a012b40aa20e39e4e6066bd139521f28dac2c8a516a0c086d182b3a8da6138256d", 0x2c}, {&(0x7f0000004a40)="897630dc4067cae1844b7d3b0c031b98c8a0d783eb4c892b428b779d5c5622a3b07074424a", 0x25}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="500def637a1571b6ecc52c092c68daba8be42736520c1116dd0fe61397da8875cdce8ce70f21647d26d41ec0d02afc70f8dbd3e28dd115405c679f99f7aed690d57275a47e4e6bc260858cf9466d243683933d9630853c199687c4412125458bcb6e5789090e67ddf3a73e490566168668827d77b4e95d0cb9c0495ce02357eedd0dba874eaa6807c29697e53fdc3ee8b813501f55cba0ca8c32c316fa9a0e5f76d41e01db577e20f44d904047352af42e59cc591e27b99051f91b8b91e2f816f46cc8d14f000c88b4a81bb8f9358bfe923f7f605fb500151f8165cc00a896a7a02a8ba747529b0a4e586eb1ba1dccac2cd7db", 0xf3}, {&(0x7f0000005b80)="455c46566019018216f33d8425541438fb0688262f496ec03066632bba5700abb28fc14d3ad8cae27677d39acf580a502b3d49dcac0d32a28ca7ecfbfc2b8d0ff92725eaf121e437f7e04368bf5e6ba135a87b565845870e405ba99ecf02909925adbdadddae6ea7d130c566416abb4660255f02061e26a20dbecd49a2166a52941f21259f", 0x85}], 0x5, &(0x7f0000007900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r8, r0, r0, r4, r4]}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xe8, 0x20004000}}, {{&(0x7f0000007a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007ec0)=[{&(0x7f0000007a80)="8cb76d77fd0942cf561c2feff9489fb8c51e0bb77bee580d724070f3921ddb6b8a75f1b3bbf64f679288c435c425188f350fbca9b6012b7161a3e286ddb8244d050b54784c25f020ba6f91c8b4209ba70735e3e52a68ebc8db45f53a90f74f11f7c7bad66c0bf42bda3f31576a4abe1ca4cbb2a152c498bc98", 0x79}, {&(0x7f0000007b00)="b81fa8c61d283d2b5d04ff65ee8c4a4bba135b3f2b5edac49437ca15ca589baf729c0e9eec8c446b5845f98b222e5056074575e33e56753cf7cc56926d33a1eafa25e62bfc4b46eb58e7db9c5d368bcfe75be7733a2628ea3f5faa1aa3557cd12d59118167e6cfe55973237c2417e1ea0dc545f7b56796bd6618a7a6b443c522c577ad3dfff1cf709563fa71a6350530fb63b08980cd6809e105b6cf3dc56977da591a2d0e64091a05aaa606b3bc58d8c2a52b4c01d7264c564608eea9bde25769ee56274272ea197584", 0xca}, {&(0x7f0000007c00)="86d39f9b701437fcee9e7470897753b91b2c4de047aa44852ff6a2a5616be4dcb0386fbd878de25f575147ee664373f0a28d68cdec7c193eeea510adea4be4a5298b37b0eabd6fb856e6d8d2433c221fd3a1ab0739164ff284", 0x59}, {&(0x7f0000007c80)="a9142af875c26a65e350dffbf5f21877264ec74bbe238230ff8f4c6591a13bba0dc114a4e245faff7e929fdc1bc4e0fbf6ce5b9901051ae0b3c227bee33c7bfed73975ebb3922b56f4b455955acb47d9", 0x50}, {&(0x7f0000007d00)="ddc7ef4f3e329cce433462c7d238526e588ea8a266792cd49f80c1ae86d39bca220b280b8479e57bdb874e384b70f129d9b31b775ac81c8a20512e64dd0a54fe84ed8f6faaec7ab65e0d53d7d820e45661aac647e68dc417dc0d69512edbb1d41548750451e0e9a0ef6a659b7db258cd6fe90a26957f00706291e67190fd6fde244ca4cb8d99f31757500b0c3e3dcdd6fcb5d8518ee6", 0x96}, {&(0x7f0000007dc0)="fa975c12d85cac8888b068f0d437c37b0dce32fdc363f791b09c55cba3e11e84d66a32c93b72f06f", 0x28}, {&(0x7f0000007e00)="62b4f447a6b6cc5f236b5229067c168dccef1b33171832f40053c95a2b18adfe19a745b0c71a4621e4fb5cbce8e44cc02e3bf2ed8698a7d1b3c8ed04ce876304c86492a0e1dac5238dd3755fc42e1ef795b3", 0x52}, {&(0x7f0000007e80)="b871599329cbc0a1fa79a3c74ca52920e66b19956170f801adda10676bed20a104728e98f5", 0x25}], 0x8, &(0x7f00000091c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x38, 0x20000080}}, {{&(0x7f0000009200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009600)=[{&(0x7f0000009280)="f9c9907c707f87e60feba2bd8fb248ecf709552561f51f03bae3623e69e0ec9b7aae042acefb3bac7fa4841dbde42a8b59903ee167bf1fd88687ed9178de7dc81af3e37a41a12e7d9e7708925f446c324d8ad9bc66c8cb7d58860a22898d0de7b2ecb0cda3c29fcb174d8521c7c882b4fb157bb7b3147d86064a6e7b2b83bfe9fb5d27ee7d6e69f113957fef6694bf0e1feedb828a5e4a63", 0x98}, {&(0x7f0000009340)="d502b178dbae9d9ce8676b6e2cc2796382dacdee6bda77ab7ff68fe7765dec5d7c2a47beed10580ff8454d9228cd1cbb4ab10c3bbaef976b3c2c26ef6226691bdf80dc20e34ad0b893a37c3f62f38076b4c8f378dc59b99a3558f84ee5542535a02d69526fdc9db2c49d5fda0ff45e08b90f566733d8131740e44381c49a8527c256ace58a0e9d3580ba5e58e9fa12cceabc8c3ab4d1e25fe96642f51a2cc2e127cea2b59f279c25f83b11807d21afc8f67a99a95c6abb1c9faa1ff604db32f53be5226f757f17a0ada3ee960c2535", 0xcf}, {&(0x7f0000009440)="eab7e6d4a85ee7e3377c85b03dc2ca7780e768ef9f6491e264fad2cb9d4eb2310f9e01fa2e0241d2b289ce725bbe94fe938a3b6fb59a79f0d3abaf7a527931a353596a4713bf4da507dc427a0c67c9f74d6d18af24ad3ff83e569717d2544dccfed8a4824ee5f483fe2d0da6b481986a3eeb54a420d5ba323bf5ef64433857a95e880f3e6c21c061cd663c3bc3f5456df3c1a94bd1ce99dbc05da9b29ad834e59a7228e8060e991af98a63b7a323bdb7753b9dd5194c167991fcf4aa12189c09701861d393e1a5b731e6ff96", 0xcc}, {&(0x7f0000009540)="b9d06f7453b2204081d81c5dd260ce45e3e087cf20b4d95adf0fe38d27bb6cf3fc7c32a225fa378d1f310505ef7ef085ed2e0e677ed53c01a2c2f250f0887479dab8863294d9d32ce21fe3fb2a345a80aea20b41f92d80cc50013d8159b82fc791aed8b8f4dda943e2012f28467bed1dd86bc5d7c5", 0x75}, {&(0x7f00000095c0)}], 0x5, &(0x7f0000009680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8]}}], 0x20, 0x4a850}}], 0x6, 0x800) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) syz_io_uring_submit(r3, r10, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r11, 0x0, 0x0, 0x0, 0x101, 0x1, {0x0, r9}}, 0x5) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r8, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 2: r0 = syz_io_uring_setup(0x7d06, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3088.614584] FAULT_INJECTION: forcing a failure. [ 3088.614584] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.615968] CPU: 1 PID: 13996 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3088.616759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3088.617716] Call Trace: [ 3088.618026] dump_stack+0x107/0x167 [ 3088.618449] should_fail.cold+0x5/0xa [ 3088.618892] ? create_object.isra.0+0x3a/0xa30 [ 3088.619425] should_failslab+0x5/0x20 [ 3088.619883] kmem_cache_alloc+0x5b/0x310 [ 3088.620348] ? mark_held_locks+0x9e/0xe0 [ 3088.620815] create_object.isra.0+0x3a/0xa30 [ 3088.621324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3088.621909] kmem_cache_alloc_bulk+0x168/0x320 [ 3088.622441] io_submit_sqes+0x6fe4/0x8610 [ 3088.622937] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3088.623525] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3088.624088] ? find_held_lock+0x2c/0x110 [ 3088.624565] ? io_submit_sqes+0x8610/0x8610 [ 3088.625068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3088.625625] ? wait_for_completion_io+0x270/0x270 [ 3088.626184] ? rcu_read_lock_any_held+0x75/0xa0 [ 3088.626718] ? vfs_write+0x354/0xb10 [ 3088.627151] ? fput_many+0x2f/0x1a0 [ 3088.627585] ? ksys_write+0x1a9/0x260 [ 3088.628021] ? __ia32_sys_read+0xb0/0xb0 [ 3088.628495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3088.629097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3088.629692] do_syscall_64+0x33/0x40 [ 3088.630120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3088.630709] RIP: 0033:0x7f0301185b19 [ 3088.631137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3088.633253] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3088.634132] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3088.634948] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3088.635785] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3088.636606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3088.637421] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:45:50 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x2000, 0x0, 0x0, 0x0) 04:45:50 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = getpgid(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0x34c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x76}}}}, [@NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6e, 0x0, 0x7, 0x3, 0x20, 0x9, 0xfff]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x60, 0x16, 0xb, 0x2, 0x16, 0x6c, 0x2]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x16, 0x16, 0x6, 0xc, 0x1, 0x60, 0x48]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x58, 0x12, 0xc, 0x24, 0x6, 0x6c, 0x24, 0x5, 0x0, 0x60, 0x19, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xffb2, 0x3, 0x3, 0x1, 0xc03c, 0xfff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x6, 0x6c, 0x6, 0x18, 0x36, 0x92, 0x48, 0x36, 0x60, 0x5, 0x12, 0x1b, 0x9, 0x48, 0x36, 0x3, 0x3, 0x12, 0xb, 0x12, 0x60, 0x2, 0x36, 0x1, 0x12]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0x1}, {0x4, 0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {0x7}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x6}, {0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x4}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x12, 0xc, 0x24, 0x16, 0x1, 0xc, 0x7e, 0xc, 0xc, 0x3, 0x3, 0x36, 0x4, 0xb, 0x0, 0x9fe4e42c790ef086, 0x1, 0x2, 0x18]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0x0, 0x6, 0x930, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x17}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x6, 0x5}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x8}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x60, 0x6, 0x48, 0x1b, 0x30, 0x1, 0x45, 0x5, 0x4, 0x4, 0x3b, 0x60, 0x0, 0x48, 0x2, 0xb, 0x1, 0x6, 0x16, 0xb, 0x1b, 0x12, 0x36, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc4a3, 0x3f, 0x4, 0xfffa, 0x40, 0x401, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x4}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x4, 0x2}, {0x7}, {0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x2}, {0x7}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x3}, {}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x4}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x3, 0xa}, {0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x0, 0x8, 0x200, 0x800, 0x0, 0x1f]}}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xa51c18a480b1a6d4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x2791, 0xba, 0x3, 0x4, 0x7fff, 0xcde9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff55, 0x6400, 0x81, 0x2, 0x6, 0x9, 0x703]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0xa}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x7}, {0x6, 0x9}, {0x4}, {0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x16, 0x16, 0x6, 0x24, 0x5, 0x48, 0x6c, 0x48, 0x1, 0x6, 0x9, 0x48, 0x1, 0x12, 0xc, 0x6c, 0xc, 0x4, 0x60, 0x30, 0x16, 0x30, 0x36, 0x5, 0x36, 0x9, 0x12, 0x1, 0x4, 0x9, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xef7c, 0x7ff, 0x200, 0x3, 0xfffc, 0x99, 0x0, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x60, 0x0, 0x1, 0x6, 0x6c, 0x4, 0x24, 0x6c, 0x2, 0x16, 0x2, 0x2, 0x0, 0x1d, 0x12, 0x3, 0x4, 0x6c, 0x6, 0x6c, 0xb, 0x24, 0x30, 0xc, 0x33, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x3, 0x16, 0xc, 0x5, 0x60]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x3, 0x6, 0x3, 0x9, 0x1, 0x36, 0x12, 0x2, 0x4, 0x3, 0x1, 0xb, 0x48, 0x1, 0x21207a659c287dd3, 0x16, 0x1, 0x12, 0xb, 0x16, 0x30, 0x48]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0xc, 0x24, 0x48, 0x16, 0x2, 0x6, 0x9, 0x24, 0x12, 0x24, 0x3, 0x9, 0xc, 0x12, 0x36, 0x12, 0xb, 0x5, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x9, 0x6, 0x4, 0x36, 0x36, 0x48]}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x84}, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x470001, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x44d4d9a4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r7}}, 0x6df9) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x6a41, 0x16f8, 0x4, &(0x7f0000000000)={[0xfc4c]}, 0x8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000004, 0x2010, r0, 0x8000000) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:45:50 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 04:45:50 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x6, 0x0, 0x9e, 0x0, 0x0, {0x0, r7}}, 0x7) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x6, 0x0, 0x400, 0x800, 0x63a0008}) [ 3088.989016] FAULT_INJECTION: forcing a failure. [ 3088.989016] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.990397] CPU: 1 PID: 14025 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3088.991188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3088.992165] Call Trace: [ 3088.992476] dump_stack+0x107/0x167 [ 3088.992897] should_fail.cold+0x5/0xa [ 3088.993339] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3088.993940] should_failslab+0x5/0x20 [ 3088.994378] __kmalloc_node+0x76/0x420 [ 3088.994833] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3088.995415] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3088.996018] kmem_cache_alloc_bulk+0x182/0x320 [ 3088.996548] io_submit_sqes+0x6fe4/0x8610 [ 3088.997050] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3088.997619] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3088.998178] ? find_held_lock+0x2c/0x110 [ 3088.998648] ? io_submit_sqes+0x8610/0x8610 [ 3088.999150] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3088.999719] ? wait_for_completion_io+0x270/0x270 [ 3089.000280] ? rcu_read_lock_any_held+0x75/0xa0 [ 3089.000807] ? vfs_write+0x354/0xb10 [ 3089.001238] ? fput_many+0x2f/0x1a0 [ 3089.001652] ? ksys_write+0x1a9/0x260 [ 3089.002088] ? __ia32_sys_read+0xb0/0xb0 [ 3089.002568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3089.003170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3089.003783] do_syscall_64+0x33/0x40 [ 3089.004213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3089.004800] RIP: 0033:0x7f0301185b19 [ 3089.005231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3089.007337] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3089.008234] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3089.009052] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3089.009867] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3089.010686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3089.011520] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:46:07 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 04:46:07 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0}, 0x6) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)) 04:46:07 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 04:46:07 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, r4, 0xee00}, 0xc) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r8 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r9, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r7, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r8, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x20000000}, r7, 0x3, 0x0, 0x0, {0x0, r10}}, 0x7) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/spi_host', 0xd2003, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000005, 0x10, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) io_uring_enter(r5, 0x330d, 0x38b5, 0x1, &(0x7f0000000000), 0x8) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x54) syz_io_uring_complete(r4) io_uring_enter(r6, 0x16c7, 0x1016, 0x2, &(0x7f00000000c0)={[0x7]}, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048884) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r1) tee(r1, 0xffffffffffffffff, 0x2, 0x3) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd29, 0x7fffffff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x40000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) read(r6, &(0x7f0000000240)=""/114, 0x72) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x802c}, 0x1, {0x0, r7}}, 0x5) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3105.120846] FAULT_INJECTION: forcing a failure. [ 3105.120846] name failslab, interval 1, probability 0, space 0, times 0 [ 3105.123814] CPU: 0 PID: 14034 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3105.125594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3105.127727] Call Trace: [ 3105.128397] dump_stack+0x107/0x167 [ 3105.129336] should_fail.cold+0x5/0xa [ 3105.130332] should_failslab+0x5/0x20 [ 3105.131297] kmem_cache_alloc_bulk+0x4b/0x320 [ 3105.132457] io_submit_sqes+0x6fe4/0x8610 [ 3105.133554] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3105.134835] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3105.136069] ? find_held_lock+0x2c/0x110 [ 3105.137109] ? io_submit_sqes+0x8610/0x8610 [ 3105.138205] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3105.139432] ? wait_for_completion_io+0x270/0x270 [ 3105.140585] ? rcu_read_lock_any_held+0x75/0xa0 [ 3105.141559] ? vfs_write+0x354/0xb10 [ 3105.142347] ? fput_many+0x2f/0x1a0 [ 3105.143147] ? ksys_write+0x1a9/0x260 [ 3105.143948] ? __ia32_sys_read+0xb0/0xb0 [ 3105.144814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3105.145925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3105.147008] do_syscall_64+0x33/0x40 [ 3105.147798] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3105.148882] RIP: 0033:0x7f4e9e99fb19 [ 3105.149666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3105.153504] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3105.155094] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3105.156648] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3105.158148] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3105.159704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3105.161238] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 [ 3105.177537] FAULT_INJECTION: forcing a failure. [ 3105.177537] name failslab, interval 1, probability 0, space 0, times 0 [ 3105.180029] CPU: 0 PID: 14036 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3105.181532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3105.183295] Call Trace: [ 3105.183888] dump_stack+0x107/0x167 [ 3105.184688] should_fail.cold+0x5/0xa [ 3105.185515] ? create_object.isra.0+0x3a/0xa30 [ 3105.186483] should_failslab+0x5/0x20 [ 3105.187293] kmem_cache_alloc+0x5b/0x310 [ 3105.188240] ? mark_held_locks+0x9e/0xe0 [ 3105.189110] create_object.isra.0+0x3a/0xa30 [ 3105.190055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3105.191149] kmem_cache_alloc_bulk+0x168/0x320 [ 3105.192139] io_submit_sqes+0x6fe4/0x8610 [ 3105.193080] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3105.194152] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3105.195182] ? find_held_lock+0x2c/0x110 [ 3105.196055] ? io_submit_sqes+0x8610/0x8610 [ 3105.196978] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3105.197995] ? wait_for_completion_io+0x270/0x270 [ 3105.199008] ? rcu_read_lock_any_held+0x75/0xa0 [ 3105.199991] ? vfs_write+0x354/0xb10 [ 3105.200779] ? fput_many+0x2f/0x1a0 [ 3105.201545] ? ksys_write+0x1a9/0x260 [ 3105.202339] ? __ia32_sys_read+0xb0/0xb0 [ 3105.203203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3105.204314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3105.205399] do_syscall_64+0x33/0x40 [ 3105.206190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3105.207266] RIP: 0033:0x7f0301185b19 [ 3105.208054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3105.211922] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3105.213522] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3105.215023] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3105.216530] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3105.218046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3105.219542] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:46:07 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x1399, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r10, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x77359400}}, 0xffffff7f) syz_open_procfs(0x0, &(0x7f0000000280)='net/sctp\x00') r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000340)={0x9, {{0xa, 0x4e24, 0x2, @local}}, {{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x22}}}, 0x108) syz_io_uring_submit(0x0, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/105, 0x69}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000700)=""/114, 0x72}], 0x4}, 0x0, 0x12001, 0x0, {0x2}}, 0x7) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @remote}}}, 0x0) 04:46:07 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x191d, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd_index=0x7, 0x5, 0x0, 0x0, 0xf36d08eb921490c9, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x10, r3, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8003) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 4: r0 = syz_io_uring_setup(0x3f2, &(0x7f0000000440)={0x0, 0x5def, 0x2, 0x3, 0x9c}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x3e85, &(0x7f0000000080)={0x0, 0x5232, 0x10, 0x1, 0x295}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r4, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@l2={0x1f, 0x0, @none}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7ff) getdents64(r4, &(0x7f0000000380)=""/161, 0xa1) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:07 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x50, r0, 0x0) 04:46:07 executing program 0: r0 = syz_io_uring_setup(0x3ab6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd, 0x8, 0x64d9, 0x101, 0x15, 0x1, {0x2}}, 0x8004) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) 04:46:07 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x0, 0x2, 0xa}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x8}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}, 0x1000}, @increfs, @increfs={0x40046304, 0x2}], 0xd6, 0x0, &(0x7f00000002c0)="ec902cdf784ad7ef97125460062881a8aff2cf3c7f8b83cbbecf90b7f676e068ccfa78d37109b97a476bad6f3522ec088e586e1212407671ad704b1d82d8a2715c8e5bc5ae4d8982c8b0f33dbd85f8bf84ca4d33e2fd38469770ccae30d57379254b11010fa0129855394bbd88fc22accf702f8cd2262a4f3712d31e08eed6c85442e2333e7d92f3356ce5a655583f53f49cde54cd3672d005fba6d5c451b667c5af5c73a242554d1736197a4f4d606630d8fabdb89f569d3cba3f502c0a25630a268674926731373315b4907eb56bfed035b4590df8"}) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:23 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) syz_io_uring_submit(r6, r9, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r11, &(0x7f0000000000)={0x3a43f674c0450e11}, r0}, 0x4) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3121.804556] FAULT_INJECTION: forcing a failure. [ 3121.804556] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.806227] CPU: 1 PID: 14099 Comm: syz-executor.7 Not tainted 5.10.257 #1 04:46:23 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:23 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0x6e, &(0x7f0000003580)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000003780)=""/43, 0x2b}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000001c0)=""/49, 0x31}], 0x9, &(0x7f0000003640)=ANY=[@ANYBLOB="280000000000000100fb000100000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}, 0x2000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000003740)={0x0, 0x42, 0x3}, 0x18) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:23 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 04:46:23 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x299}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x63, 0x80, 0x2, 0x18, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x6, 0x8000}}) sendmsg$inet6(r4, &(0x7f0000000500)={&(0x7f0000000180)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="807646149d4416f0df00641b5e1afa8b26acaef69aa8aed843f5a32e7e3704a08548234c38082c723f26c95dde2b049c5c27584eb7f13cabb5a37e04946fc89e3144aa6e454795d33315b88a0952cbc9fa54886cac87fee7e20a86b770693c0d25fb", 0x62}, {&(0x7f0000000340)="611635ef8360232fe0cfd5d8de516154d9a56590abcacd442b363405fc878986e94edb897968922b1c7a54d1141d77c6d1c318aa2e715e3e98c45266bdb0c07ffbb1259ec9ed526909a3b6e5a0bfd393eb81f4e3559854565c16e37d0608a8eb26cba3b5d90f653d0d67c8e9d9edd7e0aa224bcfc8aecd7d672d6f34dd5504d4c63057778c6268dd2cb7fed0bd40f8fa1e27ccbb0282c41acca5c7e2b5fefdee92f29e26262ca0ca79780f54c5a0441cf3a3a7ae75a4184b3978a29c23fd2ed952975d6211406ff9abcbf2cc8a71eb1a627478d361dbee8584296d570c038bf84a7ca55ca4e1c23b0dcc6ec94b7f", 0xee}], 0x2, &(0x7f0000000580)=[@dstopts={{0xe8, 0x29, 0x37, {0x3b, 0x19, '\x00', [@generic={0x81, 0xc2, "55eb061857d52883d5a288af754409997bfcfac032e739a474291fa7890acef25ce5059cfd41849a0796d24e0ed32a41cf01a85696d1cb155cc7bfae9c32c616400bffadfd2ecd4763c2bb8e83ef112db71721481d251a2421614033edf03cc11d9887fbfde4abf57783648945f11dbf3e09c3eecacc1d17159dc269b2cf4c611bf7d5b9acb2fe52adbd4b7b26ca15e376ddf3a1f0cce0e1e443e53ea1f978ac46e02965215803599f4300fd75939fa47ca9af5e0ed399ce6f7b19d39532fef09ddb"}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x40}]}}}, @dontfrag={{0x14}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x6, 0xa, 0x2, 0x7, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private2]}}}, @hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdr={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x0, 0x2, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private1, @loopback, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6b280000}}, @hopopts={{0x148, 0x29, 0x36, {0x16, 0x25, '\x00', [@generic={0x0, 0x48, "bac5fd231585646d970a5589beee2972512762a69a826b4c06e9fafa40919442cae226ae4452c84110e1297c80ec13cbdb6c9bc7832c81f5e8976ce7b1e0e179a10f7ac6254718ea"}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x9}, @generic={0x0, 0xd6, "8397cae4a51235e5f9a12935c1b978b41a3d1d4909a561b96a473182bec34ce00196585506aa76dc203c6ca31b7431898ed67f7235fe141327c7e002df25b8c635473524296339ef6f9e44dd49d82469d2883e9d7570915e9c8eececedfc60020139c31286557c11b1a419c1da2530fc06c6906d914a53afe036fdaa211a4080d81ff1e55c961510c1aedf1cffb1a3943baa98dd5402ee8c79affab66b47dc9f7dba02845a46a3ce86f5bdcc7bd50b08467f4cdadee8440b0fb0043b6d5b8df16daddd383432330bcd245d67cc69a5f17b1319a2c99c"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}], 0x398}, 0x24000084) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x9) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:23 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 3121.807195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.808594] Call Trace: [ 3121.808992] dump_stack+0x107/0x167 [ 3121.809530] should_fail.cold+0x5/0xa [ 3121.810089] ? create_object.isra.0+0x3a/0xa30 [ 3121.810743] should_failslab+0x5/0x20 [ 3121.811300] kmem_cache_alloc+0x5b/0x310 [ 3121.811907] ? mark_held_locks+0x9e/0xe0 [ 3121.812508] create_object.isra.0+0x3a/0xa30 04:46:23 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x7fffffff) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = getpgid(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x6, 0x4, 0x4, 0x0, 0x200, 0x2002, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x4}, 0x4000, 0xfffffffffffffeff, 0x7fff, 0x0, 0x7, 0x80000001, 0x8, 0x0, 0x1, 0x0, 0xd397}, r6, 0x5, 0xffffffffffffffff, 0x0) [ 3121.813153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.814042] kmem_cache_alloc_bulk+0x168/0x320 [ 3121.814717] io_submit_sqes+0x6fe4/0x8610 [ 3121.815347] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3121.816084] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3121.816785] ? find_held_lock+0x2c/0x110 [ 3121.817374] ? io_submit_sqes+0x8610/0x8610 [ 3121.817991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3121.818691] ? wait_for_completion_io+0x270/0x270 [ 3121.819399] ? rcu_read_lock_any_held+0x75/0xa0 [ 3121.820079] ? vfs_write+0x354/0xb10 [ 3121.820625] ? fput_many+0x2f/0x1a0 [ 3121.821152] ? ksys_write+0x1a9/0x260 [ 3121.821705] ? __ia32_sys_read+0xb0/0xb0 [ 3121.822303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.823039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.823757] do_syscall_64+0x33/0x40 [ 3121.824284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.825018] RIP: 0033:0x7f0301185b19 [ 3121.825562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.828248] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3121.829315] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3121.830334] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3121.831350] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3121.832355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3121.833350] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 [ 3121.849214] FAULT_INJECTION: forcing a failure. [ 3121.849214] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.850859] CPU: 1 PID: 14105 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3121.851824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.852990] Call Trace: [ 3121.853379] dump_stack+0x107/0x167 [ 3121.853885] should_fail.cold+0x5/0xa [ 3121.854413] ? create_object.isra.0+0x3a/0xa30 [ 3121.855041] should_failslab+0x5/0x20 [ 3121.855593] kmem_cache_alloc+0x5b/0x310 [ 3121.856183] create_object.isra.0+0x3a/0xa30 [ 3121.856813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.857549] kmem_cache_alloc_bulk+0x168/0x320 [ 3121.858213] io_submit_sqes+0x6fe4/0x8610 [ 3121.858843] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3121.859562] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3121.860275] ? find_held_lock+0x2c/0x110 [ 3121.860874] ? io_submit_sqes+0x8610/0x8610 [ 3121.861503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3121.862201] ? wait_for_completion_io+0x270/0x270 [ 3121.862895] ? rcu_read_lock_any_held+0x75/0xa0 [ 3121.863556] ? vfs_write+0x354/0xb10 [ 3121.864082] ? fput_many+0x2f/0x1a0 [ 3121.864601] ? ksys_write+0x1a9/0x260 [ 3121.865145] ? __ia32_sys_read+0xb0/0xb0 [ 3121.865733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.866484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.867225] do_syscall_64+0x33/0x40 [ 3121.867754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.868477] RIP: 0033:0x7f4e9e99fb19 [ 3121.869007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.871613] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3121.872690] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3121.873702] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3121.874694] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3121.875715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3121.876736] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:46:23 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x19, 0x1, &(0x7f0000000580)="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", 0x6}, 0x401) syz_io_uring_setup(0x2797, &(0x7f0000000000)={0x0, 0x55e1, 0x0, 0x2, 0x2db, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r9) syz_io_uring_submit(r8, r2, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x8, 0x100000001, {0x0, r0}, 0xfc, 0x0, 0x0, {0x0, 0x0, r9}}, 0x0) syz_io_uring_setup(0x3313, &(0x7f0000000180)={0x0, 0x18e4, 0x4, 0x1, 0x6d, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r10, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10040, 0xe744ba0faa3d490a, {0x0, r11}}, 0xf0c) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:24 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:24 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 04:46:24 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000280), 0x80000000, 0x80000) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0xfffffffffffffffd, {0x0, r3}, 0x4, 0x3, 0x0, {0x0, r4, r5}}, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth0_to_bond\x00'}}, 0x0, 0x0, 0x1}, 0x7f) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) io_uring_enter(r6, 0x7f72, 0x1ff, 0x0, &(0x7f0000000000)={[0x400]}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) io_uring_enter(r8, 0x4026, 0x86bf, 0x1, &(0x7f00000000c0)={[0xfffffffffffff801]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) 04:46:24 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 04:46:24 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 04:46:24 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x1}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3122.138502] FAULT_INJECTION: forcing a failure. [ 3122.138502] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.139924] CPU: 1 PID: 14124 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3122.140785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.141815] Call Trace: [ 3122.142140] dump_stack+0x107/0x167 [ 3122.142599] should_fail.cold+0x5/0xa [ 3122.143078] ? create_object.isra.0+0x3a/0xa30 [ 3122.143644] should_failslab+0x5/0x20 [ 3122.144120] kmem_cache_alloc+0x5b/0x310 [ 3122.144625] ? mark_held_locks+0x9e/0xe0 [ 3122.145134] create_object.isra.0+0x3a/0xa30 [ 3122.145676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3122.146314] kmem_cache_alloc_bulk+0x168/0x320 [ 3122.146885] io_submit_sqes+0x6fe4/0x8610 [ 3122.147420] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.148049] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.148645] ? find_held_lock+0x2c/0x110 [ 3122.149158] ? io_submit_sqes+0x8610/0x8610 [ 3122.149709] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.150308] ? wait_for_completion_io+0x270/0x270 [ 3122.150908] ? rcu_read_lock_any_held+0x75/0xa0 [ 3122.151481] ? vfs_write+0x354/0xb10 [ 3122.151956] ? fput_many+0x2f/0x1a0 [ 3122.152416] ? ksys_write+0x1a9/0x260 [ 3122.152879] ? __ia32_sys_read+0xb0/0xb0 [ 3122.153384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3122.154038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.154658] do_syscall_64+0x33/0x40 [ 3122.155105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3122.155725] RIP: 0033:0x7f4e9e99fb19 [ 3122.156178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.158454] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3122.159391] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3122.160279] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3122.161151] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.162024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3122.162903] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:46:24 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000feb000/0x14000)=nil, 0x14000, 0x11, 0x0, {0x0, r7}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3122.246530] FAULT_INJECTION: forcing a failure. [ 3122.246530] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.249175] CPU: 0 PID: 14132 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3122.250741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.252621] Call Trace: [ 3122.253237] dump_stack+0x107/0x167 [ 3122.254061] should_fail.cold+0x5/0xa [ 3122.254942] ? create_object.isra.0+0x3a/0xa30 [ 3122.255974] should_failslab+0x5/0x20 [ 3122.256835] kmem_cache_alloc+0x5b/0x310 [ 3122.257746] ? mark_held_locks+0x9e/0xe0 [ 3122.258662] create_object.isra.0+0x3a/0xa30 [ 3122.259675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3122.260866] kmem_cache_alloc_bulk+0x168/0x320 [ 3122.261929] io_submit_sqes+0x6fe4/0x8610 [ 3122.262924] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.264097] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.265224] ? find_held_lock+0x2c/0x110 [ 3122.266170] ? io_submit_sqes+0x8610/0x8610 [ 3122.267179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.268311] ? wait_for_completion_io+0x270/0x270 [ 3122.269432] ? rcu_read_lock_any_held+0x75/0xa0 [ 3122.270498] ? vfs_write+0x354/0xb10 [ 3122.271361] ? fput_many+0x2f/0x1a0 [ 3122.272211] ? ksys_write+0x1a9/0x260 [ 3122.273088] ? __ia32_sys_read+0xb0/0xb0 [ 3122.274027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3122.275228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.276398] do_syscall_64+0x33/0x40 [ 3122.277258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3122.278443] RIP: 0033:0x7f0301185b19 [ 3122.279303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.283477] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3122.285257] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3122.286906] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3122.288560] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.290207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3122.291868] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:46:24 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3f, 0x20, 0x60, 0x1, 0x0, 0x8001, 0x8000, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x10010, 0x1701cdcb, 0x401, 0x7, 0x4, 0x1, 0x3, 0x0, 0x80000001, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:24 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x3, 0x8, 0x1, @local, @private0, 0x7, 0x80, 0x8000, 0x400}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000c00000014000380040004000400050008000200000000000c00018008000100", @ANYRES32=r13, @ANYBLOB="94eb5df3beb511f7633f87237d6a5658372144417445a29398945b2da4521fd4fe59aedb38a08a99509efd99223770d6acbdb3f691cc3125f633abe994d48d8fadf88f153eca9fc6ce40652b90e32500000000000000000000006df0a7d63936c0ca0647505117ee08d86717bf512fb961767a224e962c6b2091b5bf000000000000"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x0, 0xe1a, 0x28, @loopback, @local, 0x7, 0x8000, 0x40, 0xffa2}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xdc, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40081}, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:24 executing program 3: clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000001940)={{0x0, 0x3938700}, {r0, r1+10000000}}, &(0x7f0000001980)) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) rt_sigtimedwait(&(0x7f00000019c0)={[0x8]}, 0x0, &(0x7f0000001a00)={0x77359400}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001840)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/103, 0x67}], 0x8, &(0x7f0000001680)=""/160, 0xa0}, 0x1}, {{&(0x7f0000001740)=@caif, 0x80, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/120, 0x78}], 0x1, &(0x7f0000000500)=""/63, 0x3f}, 0x7ff}], 0x2, 0x2, &(0x7f00000018c0)={0x77359400}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:24 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 04:46:24 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) io_uring_enter(r5, 0x7537, 0x6bb0, 0x2, &(0x7f0000000880)={[0xfffffffffffff000]}, 0x8) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000780)=""/89, 0x59}], 0x8}, 0x0, 0x10161, 0x1, {0x1, r8}}, 0x6) [ 3122.466609] FAULT_INJECTION: forcing a failure. [ 3122.466609] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.469268] CPU: 0 PID: 14146 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3122.470837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.472747] Call Trace: [ 3122.473362] dump_stack+0x107/0x167 [ 3122.474209] should_fail.cold+0x5/0xa [ 3122.475093] ? create_object.isra.0+0x3a/0xa30 [ 3122.476168] should_failslab+0x5/0x20 [ 3122.477048] kmem_cache_alloc+0x5b/0x310 [ 3122.477996] ? mark_held_locks+0x9e/0xe0 [ 3122.478940] create_object.isra.0+0x3a/0xa30 [ 3122.479963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3122.481141] kmem_cache_alloc_bulk+0x168/0x320 [ 3122.482205] io_submit_sqes+0x6fe4/0x8610 [ 3122.483205] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.484365] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.485481] ? find_held_lock+0x2c/0x110 [ 3122.486435] ? io_submit_sqes+0x8610/0x8610 [ 3122.487440] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.488568] ? wait_for_completion_io+0x270/0x270 [ 3122.489686] ? rcu_read_lock_any_held+0x75/0xa0 [ 3122.490737] ? vfs_write+0x354/0xb10 [ 3122.491563] ? fput_many+0x2f/0x1a0 [ 3122.492378] ? ksys_write+0x1a9/0x260 [ 3122.493238] ? __ia32_sys_read+0xb0/0xb0 [ 3122.494154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3122.495347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.496561] do_syscall_64+0x33/0x40 [ 3122.497429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3122.498621] RIP: 0033:0x7f4e9e99fb19 [ 3122.499486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.503603] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3122.505347] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3122.507001] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3122.508643] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.510276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3122.511914] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:46:24 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:24 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) [ 3122.703827] FAULT_INJECTION: forcing a failure. [ 3122.703827] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.706471] CPU: 0 PID: 14161 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3122.708080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.709987] Call Trace: [ 3122.710602] dump_stack+0x107/0x167 [ 3122.711445] should_fail.cold+0x5/0xa [ 3122.712339] ? create_object.isra.0+0x3a/0xa30 [ 3122.713388] should_failslab+0x5/0x20 [ 3122.714266] kmem_cache_alloc+0x5b/0x310 [ 3122.715200] create_object.isra.0+0x3a/0xa30 [ 3122.716218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3122.717373] kmem_cache_alloc_bulk+0x168/0x320 [ 3122.718435] io_submit_sqes+0x6fe4/0x8610 [ 3122.719431] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.720582] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3122.721693] ? find_held_lock+0x2c/0x110 [ 3122.722637] ? io_submit_sqes+0x8610/0x8610 [ 3122.723621] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.724730] ? wait_for_completion_io+0x270/0x270 [ 3122.725826] ? rcu_read_lock_any_held+0x75/0xa0 [ 3122.726888] ? vfs_write+0x354/0xb10 [ 3122.727752] ? fput_many+0x2f/0x1a0 [ 3122.728614] ? ksys_write+0x1a9/0x260 [ 3122.729491] ? __ia32_sys_read+0xb0/0xb0 [ 3122.730422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3122.731628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.732833] do_syscall_64+0x33/0x40 [ 3122.733693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3122.734867] RIP: 0033:0x7f0301185b19 [ 3122.735715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.739976] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3122.741733] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3122.743379] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3122.745021] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.746667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3122.748309] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:46:24 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) pread64(r0, &(0x7f0000000000)=""/63, 0x3f, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3, 0x7f, 0x35, 0x6, 0x0, 0x9, 0x20204, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x400, 0x7, 0x10001, 0x8, 0x1b, 0x5, 0x7, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) 04:46:41 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x8010, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x2010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fcntl$setlease(r6, 0x400, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x4, 0x7fffffff, 0x0, 0x1, 0x1}, 0x33b8) 04:46:41 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000000), 0x2, 0x0) 04:46:41 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 04:46:41 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') fchdir(0xffffffffffffffff) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r7, r3}}, 0x100) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:41 executing program 0: r0 = syz_io_uring_setup(0x24d3, &(0x7f0000000300)={0x0, 0xb811, 0x4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x135, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x8) 04:46:41 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:41 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 04:46:41 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xa0, 0x3e, 0x6, 0x0, 0x2, 0x21401, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x21, 0x4, @perf_config_ext={0x7f, 0x5}, 0x10088, 0x6, 0x3, 0x0, 0x80, 0x4, 0x5, 0x0, 0x7fff, 0x0, 0x1}, 0x0, 0xb, r3, 0x12) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r0, 0x4, 0x0, 0x7e7}, 0xfffffc01) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3139.924967] FAULT_INJECTION: forcing a failure. [ 3139.924967] name failslab, interval 1, probability 0, space 0, times 0 [ 3139.927438] CPU: 0 PID: 14187 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3139.928974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3139.930729] Call Trace: [ 3139.931288] dump_stack+0x107/0x167 [ 3139.932073] should_fail.cold+0x5/0xa [ 3139.932886] ? create_object.isra.0+0x3a/0xa30 [ 3139.933846] should_failslab+0x5/0x20 [ 3139.934652] kmem_cache_alloc+0x5b/0x310 [ 3139.935509] ? mark_held_locks+0x9e/0xe0 [ 3139.936391] create_object.isra.0+0x3a/0xa30 [ 3139.937331] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3139.938409] kmem_cache_alloc_bulk+0x168/0x320 [ 3139.939377] io_submit_sqes+0x6fe4/0x8610 [ 3139.939822] FAULT_INJECTION: forcing a failure. [ 3139.939822] name failslab, interval 1, probability 0, space 0, times 0 [ 3139.940295] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3139.943832] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3139.944871] ? find_held_lock+0x2c/0x110 [ 3139.945736] ? io_submit_sqes+0x8610/0x8610 [ 3139.946659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3139.947675] ? wait_for_completion_io+0x270/0x270 [ 3139.948694] ? rcu_read_lock_any_held+0x75/0xa0 [ 3139.949666] ? vfs_write+0x354/0xb10 [ 3139.950459] ? fput_many+0x2f/0x1a0 [ 3139.951218] ? ksys_write+0x1a9/0x260 [ 3139.952014] ? __ia32_sys_read+0xb0/0xb0 [ 3139.952888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3139.954000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3139.955079] do_syscall_64+0x33/0x40 [ 3139.955858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3139.956956] RIP: 0033:0x7f4e9e99fb19 [ 3139.957732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3139.961583] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3139.963197] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3139.964717] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3139.966205] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3139.967694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3139.969215] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 [ 3139.970780] CPU: 1 PID: 14182 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3139.972254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3139.973964] Call Trace: [ 3139.974534] dump_stack+0x107/0x167 [ 3139.975421] should_fail.cold+0x5/0xa [ 3139.976240] should_failslab+0x5/0x20 [ 3139.977051] kmem_cache_alloc_bulk+0x4b/0x320 [ 3139.977990] io_submit_sqes+0x6fe4/0x8610 [ 3139.978893] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3139.979923] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3139.980921] ? find_held_lock+0x2c/0x110 [ 3139.981774] ? io_submit_sqes+0x8610/0x8610 [ 3139.982661] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3139.983880] ? wait_for_completion_io+0x270/0x270 [ 3139.985084] ? rcu_read_lock_any_held+0x75/0xa0 [ 3139.986038] ? vfs_write+0x354/0xb10 [ 3139.986806] ? fput_many+0x2f/0x1a0 [ 3139.987544] ? ksys_write+0x1a9/0x260 [ 3139.988351] ? __ia32_sys_read+0xb0/0xb0 [ 3139.989201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3139.990283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3139.991348] do_syscall_64+0x33/0x40 [ 3139.992121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3139.993172] RIP: 0033:0x7f0301185b19 [ 3139.993949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3139.997729] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3139.999291] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3140.000750] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3140.002211] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3140.003674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3140.005163] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:46:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="bcd3140000006404000129bd700100000025a7d4b300b61a1455ce0d9bb922864d33679e25b5815d3add07329fc692ca640d5ab7ba60d9ced64d9f2b8ded0c7c96d724d0eacd58e25b21fcb22cbd30447ecf7b64f519646757d2b9dfb76e054000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200, 0x1, 0x10}, 0x18) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x7fff, 0x0, 0x0, 0x7, 0x0, 0x1, {0x0, 0x0, r5}}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:42 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x90f1, 0x8001, 0x8}) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfaee39f29d2f6153}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x1420, 0x1b, 0x300, 0x70bd2c, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x84, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="51808869736854cc7bc15cd8bfaea9", @nested={0x263, 0x68, 0x0, 0x1, [@generic="062ecbeab57f1193d87300f054f194e32efa7b5ceb7669ba7a08931a4eec9c60fa54b062786a0b83c5fdfa0ed20e1fc2cd538ac3419029f74e0332d2e15a67aff36ff018d49be4d319a03c96c1bac3e9ae80cc471999064ebea6e8f195bebd2e861158388d35bfe303dfcd006ccd214c0f48e3f8f2f31743dfd97b313f273e1958a9b293a4843e73209ef5dd1974af9c5e2101d6", @typed={0x4, 0x32}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x95, 0x0, 0x0, @pid}, @generic="7b94866fe51a7addb4d48f34da78fd413200b4f37e35efdc9d78dce8adc043ac8e6843cfd34343ef8925942fb24cb4643052a17f90fcf565c32907f4e8e9ed2055cc4d5c3c1e6dbba22bb14cd6c915addd30f92b21a582d7d2eb687813bc67c1797795fafc2094884e84a593f4f4a5dc47cca6337b598996633213a106dcfa75349e3fba4050f5dd5f0bd8902dc40a3ffc7cef6226c097592dfc58c377ce22e6a8c26212383ff9befebe5cce2324c24ac1728011ab032ed862f98fcb6c6d9d5b9a", @typed={0x4, 0x2e}, @generic="ef12380f5ca04ce51cdc86102fa2d7b74472020bd6e568b23aa75efe49e96a557f0c0f7f78472927a38db1ec8c17467f1beb18e282bc8fc1e1742299f79088cf0f2d78082cd0719c4519cf2d280eb945b856c8a7215f0522a18d806d670f71e85d5760be171288633c86c630ad2733162b5ded5ac039d07a10b2d67ed51e71a17f7cd94cd54a270e51b9c960f393a16b06d5989fa266e79aac7ae19f58fbbbd8568bbe5ed5251b5e670d301448678f5418374081538166485c00ffe3c7d3c06e1be092de1d6c68a1c5fa94ee10d290213bf444a365123d80613d34945ec20c8cf05c3768cadf94201fd1", @typed={0x8, 0x9, 0x0, 0x0, @fd=r0}]}, @generic="88c207212e548f236d705001a3b7362cd116aa5ef2ce0d7244cd5e28e90f7d0037cbbae847803a142c2095f9b33978fe0396bc2603a3d5cdd82ba570ef32af909c21f5dc2db6bf8e964893eea9d0e59886bbebbdb014bb3aa2fc87a84c41ac0274f39be7567b046f6949c1dfe9020df59b42b45071a6a3bc803c", @nested={0x1004, 0x53, 0x0, 0x1, [@generic="475ceeba38eb7e34506981afc3244f83ba7d5372c99148a34e758750262b463ae2246f2c3ffec8e0b0528d8872d0c39760d193d86485badb6147763c6b5469b1cc4c3f03f12e2abe0b442af3357e4fa22b8d1a317813f80ddfac1c79cfa541dbb5c98f5be2a1153ee0dcfcbfd439fc679dc4030d9c6895f1242d95286414e4d40f7caf5dcdfd0aeb3a5318efcb2b6d510b13cf971098fce43384948e7981d876d0d457069e22a70e3c5d05eedfab9242ad943dcb98278c9b718ece022ac45f3d8a9aece74086951f8dc4a4af0cd58f696cf5e96b7edebb08f5f42708d1d98d9bcb6a44d33fecbf43b7d95a5c4e22feda03b852b4175ff5118c6ee36bdcf3ff588f48978237d48163eba896096bb1e55e253eed76894818f63d7d39f24c093d1fb1e38b0db781e7104b70d48d72c7b8c6a74a34e1149c55289fc86515ebaf5689c70df8c7ef8fe2a735218147b67b063f30a16bb0a571aa030ae08f5202873818031f21bb9d7ee991ad811203137b20237a0ec54a33392dd39db602181d3b472d7be62c9362b4a0d57377affc71c014e3b7d75070cce9dd9cc958bf81919026023f1ce560b84c8c41889996d20edabe0c0a2f9764928e7fdf77063c990fff7cb0133ed71cca2718a78f9316e872c9359c32a718f414ccb510a84fccc6dd6165b3d6dd45eb0e3515e7da0c9f85fa9fe7ffdf99c86dbd4f69bf7a829343a3ce5c1206234e4b6750d7f415232b096f7fc8cc31baee0771698312000c9d7237217074f56dd1dc205a2eb07df968f6a260c478c2ad6a3459f92eea853f0cbce4edcc2830f10b14ca17aa4ac3e27db5879252130904c5b15d3a980881b0cb51b8f3074e9c1e5ca49c23a6fb6d8b905276520af2965691ea4ce622370634d1392e5ab60248ea3a0449fb1add262a3f74e9e0d2a8fe0fbe90181c90011deab31a50da72e130f7db429ef6a7e9e1f44cf500e033528f5a4e5e74b15a6ceda412657750b574d69a8b7a05a8cd60bb74c510d30c671a74174c738560183cd524bc7afd579e4418e104e5f11eb7f063c13f97f24bb271c6a57456830b1a486c6f9a1807d215b7d4379f6790655da51d7f7173ee35110aa743efe773f4ec4883e32655cecebd53671ea22f8e078910d7a5bbaa47c68bdd69dfd850badc6224a5a40139d02ffb8fe20681a920193ce5c3df9b5adfe2c7cfe183a52373c02936b9a64e59a986ebe25ca086fc85df9e84b018ba37029d522c8c8a95e6edb419e379a77edd5bb472bbd52263496b34f76ea7dbc14300e7215e4c7dcc4fa09e24baa58b402a243f6a9ab5f7d7ae20fbc4c6239e316a95561aa2839ca880b349fab1ca70464e7c38f93671b015ebdd5d4207ed00a826e1977430829be4bfb4327b6a17be8ce34c1b39e200a0aaaf2825368bb484202d3b113a561b6952d1cecfbb81482342d028184df28dac062da2104ca2e10241a9f3c6df20e76b9b32f51044d4ac5a1980726ae524487e60b90e8c9b7cdc99cc991e036aeffa7f12b7fc4417315fa36b980bad7a61baafcae785cfc43d30452afbd9b72fdb28ab743ef88ad8b76857233f293bf5cef22fce0d744bb43e5ae4b0bdd971531c9d4ba8f86609f19e904e8af1587312479a5e66b5401b6596dce29e213d202c34694056bd42991e7caeb397a531cc0f514f589197664ae9e89c2340c7bd7753739e7ba834e8b8044677eff0e95d9ca4b7c0e04044a35a45673d5ac2bda0872a8f8d039b62d1ff94483bbf3ad780979abc1bbd9f2dbbcf10a295563375c41fc337f2bf30c3ccb9265376679e7108adf36b4df6abf1c776b89c75941942b15b6add4cdb0a7adefd7c3947f467b9f9a83ab6ba72e6a1dac3710048726aed8cd9855a3b95f2e51a27c970a19814c9f0bd4883d1ff6404d5b4347bf29e3b5de3be1e40072e064df29f1830acca5d31ceee6f0312c81205a3562ff636d9ca11743a469c12e11641016193372281397f8b96c5ba3a3f7a36ffef19c8444bf9d2b8e3507c2672ae2091a3400b3bdd1c6e5139af0f3beaea76d67f7fe25c490e7688f99cf0d4f57c05579081a28fea7ce94ea85aaf1425772e13873cb55e3126f287afc9314155c72df9bd3ebe0fbb371e71134300b1f14c0696c86e3c23fd033bbea2f5e739e70c40ccdf89b62dd58157b52eb9792ec96d50be907f49f1a7d234c8234f7707f6775f3ac128820cbbe3967aaa92dc8d61c7e7d720046a3aef1a48516dd9bd519f319bd4562e88bed555b708c5bc85fae5441a0a50b37df5c1c650db2b1364ec24d033d391357d9f356f637631b0abec0d5ca95e3e42f932ed7351f7ad0f566faefb0815e82adc50505a3d7c5a5e8e1b729b25ce9ddd70d1ef1a5783f686bf394df6767a1721796cb0e4047f32450a2cf05a34f055e0705065d9f5268015d8baaf29e201af36e8397f8837b27ec78e1fa302f0500bcedc863fa8565ba1c5f7fabd1ede370526cd03e8227f6699f7638fa80b07495f541ba1addc753f9e47ac4007ae8fa0b5451cf0baa33407cdf34540cb7e738bb5c726d96e9d3ece08a158f4d7fe5609c2d6f739e1902fd16cdb1057483a1bb9802965dccf79841da53a1fdf29c499e76c68402974c69be0eb2af47af1cdec6ae4f8c3def14b1ad6cbfdaf442ba910d431a429e59333cefecf96615b971598a98b2dab11b87720bfe10efc87f7873aa6db788aee9aa76df93264cac8554fd6cb87e8734eba3de61701b499240d58b64c970e7e08e6b90a15cb7958be9e52cc2aaf931418a70ec8c39e724c39323e4cd409858c3aae96a7e4958328a1ccb5cc3930a56dc20391fd72f81bd97036e50451e443f15dbfbf34ed205b003675f31dce50ce6a19fcbbda62b6151ed63ec99cab896a8ff8bd1b2eafeead82972a7e850f2097a166fe312c2ea4bec83abcd0d5030d5856115658ebe728b8b67e6c0512dd467734285fd417df9a9e1d661e7634d8f73f382114eeeb9760a5eb102c305a6255a88b3e2daf853dd6d363db873299cbf39a26996048014890442b79b27b67a1547b96d0b7c8fbf24e469e57d2f7505ad10e3a67f54ef2cb51be9c5e4fdf5f5baa45b37a08e3f8dad3efb569f9f0232cfa0fa649a47246abd387af7f68286306ff140340cf3794352830667c8fd2265d602c3249870b84f9734a5f5995db9d8b1702b87aaeff8e55f4ebf2d69cd5cbb4640df5be1c400d58d087364c0b5bb3a22e5415e07717422a74e0954d2deb6e35efca3a1afd013b0da8c1410f3072b9f28bfabaf5d2b242aec5c76832c00d7f354509d021ef36e4aaf632de6b3dac20e1d2e9de96b9acb38dad20b3739c4a3c1803137b1d4ade3bb1d7fd2ec57126bf932d12e0e6fe892d89de0de6f3bfbcd010a7729946e161b753301b132e5afbbd4f921a7494379f170ae9e839027808852a784bb47860e79968cd5e9ee691edb0d08337ea0ae0796c9705719ec522e8c6cbc3eb6f2841a3c3e404c76aa737e55b0825bdee9895be4812a883ccda2879fd94aa28fa97739e3564cb898bfe91277cb28b0b3eebc1a8cb660870d156e1d0817804a1f152221bf8c0b9beb4482672a1529dd75cb0fb02570f0d6aac44a4c1a84ab0ad5dfc99812c0ea4cc9e34a0fa161ec803e2e229c6c4d980f4fb744e7d47c2781834688b7997d732ed6935e88d46b0dab2cbd4b2eca8ddc5d0a2145142fe0425c3479e55ed9ad4e8ad572866b9198de66e2c78d92541f2c7f5d36c8e0ed149fdbd0b9d022c391c3761a4107245cbf1a849d897780e905b11f956cfff30ffcba7e92bcaed228640c2a066a5088ae6cba2ac73134c78c73306eac5bc5cc6c6a80fbc59fff8cb10cd3df181caf57d4a1c744f299cd7c6e099b768a3f2d9d0b14ea34c574ee09607d857d4fc7e56901a511041f8b25f6e9083aa6ae15ef5e2814ec0c572333ab3731c24a4ce2035402b2cbeb71bf9351af6cbb06f28ae394a9f9b614321012242ae2b96bcea146d07c8a75fb3ed2c332eb7553f0b492e07c657774bfb4d6aeeadbf3823df4e914feb085ec53092e3671acf8bc325c4050ab342aabed070e814c0457865fc1cae7004e42d593ba4beb598180eb47efb8414d5ef0857218829791432e9b3090403df48005d43b7b2dd5044dbfee4a094651ef27a10fa786bc7ce5cb8868eef64947c1f11d1b5857fe477a1af3360751302f044a2eade1ecabef288299e3134b036e31c59f3bbf0a258892655efda23e44187c68ef28e0d960afe8f1a11b5cb97fded971f446817e18eedf8a0f1c190d77587dbbb929cc4b95999f9d65ee24950724ca6b20586abcf53ada64b788ec26af109fc0cef172edf5d9df9fffb931b165f939452c55950dbb6c06b5457ae6296138e6a9c73d05a4b60ca699282dfcb09db558379e28289e60e12b913c8a8f5363061d1640dffb683b4ff60db894a786dea78ac06df821a816ceb6ccf52e31141c170194f95dab6383d40e2a7bddb53b29b7e2af4b80c3a04b1f03eedb3deaf7d5381270b797578203d57e81c0dec4dd57cf264a355c3c64d1db4763a7e563104b6d77b243794fc24d5d2117598e1b79e7abc09d189580b96a3e3337af19404a13e45b46656b1c78da585c2438c517f34578652b8363c66a50e188feb2b0a0c9a962ded63c62d94e2ceb1743962912835dfff6ea75e3f0fd806d2612cdd48a705ad39124ec2c2dfaac81ebd7488690f8d5f6f5418803e40cbb7237d93b764360ef03045e3f511b09ebc4cc744ab2babe1eca3a9bbadb4c90caacf5bec3dedc029ffbdd7d139a8f5bd21c185d6386c77166c718dfd23c51bb0b9cff62c8cf87226a73518476723a31ba4af9997660ecd25afc939c1af49c8e36c6cf738e6c82481b962d6a23fb359a4f25fb07611922d40cd3e8a85d1aa085c87582773df32b153e030340f612534ae61ddf9ef9f7b73df75bbbca87e7339bad96eeb1f2a17dc3cb24fac1229aae13510b8161c2efa990881874612a90e63a5dee960c1272de5e452490063b3afa72e736bd115791b6fa017b63fbe184cad78596f61a89ad8a42b2523a258867c0aceca8efcff5e11f9dee9c992060ab2653734ee74ad4eac4e511426fd46a78ed44bca473e8f4882fb33fc874f894c0df23f8cb5ecb8053b022069c85f3c58716d23a5a3a5b9cf863d3376a570dd57e577496ac70dfd64fad7681f697d7c1452a4794db3cff1bfa70fd2ba3c87dda1b8ff59db0f03f046c9a5e0b41a65ac91099428aed5ff7a17b1d100d73ddbb825c89a68b6ac73781e06c95da19ea39785882dbd5be833b0bd589f9ccb8c3613917ba6a19acdad4bd2b0bd34508e0a518335ab76fbbc16a8fa7eca78bbdd43641e63af93254ea6c9fbdd77ec8aa892bf87222ea1fdc6056dad750262d7b6ed552779fcc5e2e9a54f6caa1f257792da76531470834b6ae5f98952771ee72ff52cb09112aeb2fd08ed9463b338239e2fe9b7d1400abcf63200fecee0a5d767de33830e34e3635932699a541d9260e9ea16b7e0efc0f000ef4f492e71e220d76fbd7c684a74f507d08201768cea6c88f4329f37903f68283b9566748837d87381febb551d5c9dcb468656f6b6ff02ff207dee5256bba6a253ae1cf2ab92845dd613615b153ff709c23d67d8dbd0bdae0f15601b86bb2a3b83ace5961c35ce2f9cc75ca138e78d5114bfa8307e47d1e3d49e3735974a5033651359a0d66cfd894fba9a4b1817e3f3f4fc701fff83da917f83187807a1f2d5c4b75c281e452b142e6469907eb6f9243ae59f5fc8e3930cc54e7b5c285ea2dbd944cbdf8a94"]}, @generic="cf4af1368a1010658e296e94411ed691c62367c81a37e72d6b35bf69b0d9f71b761ef41cb8592de4b332efd8cb91e22b3ca74e356fac8409f53448a0a703636459483051a88928ed599706c32ff53986361502f1072f94fb5476b3ff8ffee5056fc42edcd58a41b5c59c5dd5ba298c90a0e8a3db5b8f085129b28752896c8ae091e271935b59ea1e13145ae3", @generic="cf7ebbe29dc291c3a50b51762e8b67fbd864f1833739e7a6bcff3c9e4cabb119011a869a5c43d467b802388358c07556368f735a5424acddff818a866336e0c42f74c7ede26d0cae421fd7c1b64aa44bb2e1be4e664de3be2585c0e3ceabb3ec974dda9e2cd4f83d3ffb936fca2057ca22fec22c4f27abf58814da22eb85bf8e9503ca07"]}, 0x1420}, 0x1, 0x0, 0x0, 0x880}, 0x1) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:59 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 04:46:59 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 04:46:59 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) syz_io_uring_submit(r3, r6, &(0x7f0000000380)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000340)={r8, r9+60000000}}, 0x7fff) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000003a00)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/53, 0x35}, {&(0x7f0000003680)=""/201, 0xc9}, {&(0x7f0000003780)=""/181, 0xb5}, {&(0x7f0000003840)=""/137, 0x89}], 0xa, &(0x7f0000000500)=""/24, 0x18}, 0x0, 0x12022}, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010020000100000018000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r12) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r11, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000126bd7000fcdbdf250d0000000c00018008000300010000003000018008000100", @ANYRES32=0x0, @ANYRESOCT=r12], 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x8001) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:59 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:59 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x2) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x80010, r4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) io_uring_enter(0xffffffffffffffff, 0x2755, 0xfe71, 0x2, &(0x7f0000000240)={[0x800]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x0, 0x80000, 0x0, {0x0, r7}}, 0x9) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:59 executing program 4: r0 = syz_io_uring_setup(0x6c6b, &(0x7f0000000080)={0x0, 0x4, 0x20, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:59 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x1346, &(0x7f0000000000)={0x0, 0x4320, 0x8, 0x1, 0x161, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r8}}, 0xfffffffa) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:46:59 executing program 3: r0 = syz_io_uring_setup(0x5d0b, &(0x7f0000000340)={0x0, 0x40, 0x21, 0xf7fffffc, 0x828d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = getpgid(0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x1}, &(0x7f0000000280)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r5, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x110) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3157.874714] FAULT_INJECTION: forcing a failure. [ 3157.874714] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.877248] CPU: 1 PID: 14219 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3157.878752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.880568] Call Trace: [ 3157.881160] dump_stack+0x107/0x167 [ 3157.881975] should_fail.cold+0x5/0xa [ 3157.882801] ? create_object.isra.0+0x3a/0xa30 [ 3157.883805] should_failslab+0x5/0x20 [ 3157.884651] kmem_cache_alloc+0x5b/0x310 [ 3157.885547] ? mark_held_locks+0x9e/0xe0 [ 3157.886433] create_object.isra.0+0x3a/0xa30 [ 3157.887409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3157.888529] kmem_cache_alloc_bulk+0x168/0x320 [ 3157.889539] io_submit_sqes+0x6fe4/0x8610 [ 3157.890488] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3157.891563] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3157.892625] ? find_held_lock+0x2c/0x110 [ 3157.893519] ? io_submit_sqes+0x8610/0x8610 [ 3157.894463] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3157.895526] ? wait_for_completion_io+0x270/0x270 [ 3157.896596] ? rcu_read_lock_any_held+0x75/0xa0 [ 3157.897778] ? vfs_write+0x354/0xb10 [ 3157.898747] ? fput_many+0x2f/0x1a0 [ 3157.899673] ? ksys_write+0x1a9/0x260 [ 3157.900654] ? __ia32_sys_read+0xb0/0xb0 [ 3157.901707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.903076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.904414] do_syscall_64+0x33/0x40 [ 3157.905382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3157.906683] RIP: 0033:0x7f4e9e99fb19 [ 3157.907608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.912292] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3157.914225] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3157.916041] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3157.917849] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.919781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3157.922116] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 [ 3157.933837] FAULT_INJECTION: forcing a failure. [ 3157.933837] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.936803] CPU: 1 PID: 14218 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3157.938590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.940728] Call Trace: [ 3157.941432] dump_stack+0x107/0x167 [ 3157.942388] should_fail.cold+0x5/0xa [ 3157.943373] ? create_object.isra.0+0x3a/0xa30 [ 3157.944578] should_failslab+0x5/0x20 [ 3157.945613] kmem_cache_alloc+0x5b/0x310 [ 3157.946677] create_object.isra.0+0x3a/0xa30 [ 3157.947818] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3157.949160] kmem_cache_alloc_bulk+0x168/0x320 [ 3157.950340] io_submit_sqes+0x6fe4/0x8610 [ 3157.951453] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3157.952751] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3157.954008] ? find_held_lock+0x2c/0x110 [ 3157.955059] ? io_submit_sqes+0x8610/0x8610 [ 3157.956196] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3157.957458] ? wait_for_completion_io+0x270/0x270 [ 3157.958702] ? rcu_read_lock_any_held+0x75/0xa0 [ 3157.959897] ? vfs_write+0x354/0xb10 [ 3157.960889] ? fput_many+0x2f/0x1a0 [ 3157.961826] ? ksys_write+0x1a9/0x260 [ 3157.962789] ? __ia32_sys_read+0xb0/0xb0 [ 3157.963841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.965212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.966524] do_syscall_64+0x33/0x40 [ 3157.967469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3157.968786] RIP: 0033:0x7f0301185b19 [ 3157.969740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.974410] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3157.976337] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3157.978153] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3157.979963] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.981788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.983605] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 04:46:59 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x7fff, 0x6, 0x1}, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1210}, 0x1}, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x62}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_setup(0x7adc, &(0x7f0000000000)={0x0, 0xc29d, 0x1, 0x0, 0x124, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x9, 0x9, 0x1, {0x0, 0x0, r0}}, 0xdec) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r0, 0x8000000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r7 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r8, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r6, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r7, 0x10000000) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r8, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r9}}, 0xfffffffe) syz_io_uring_submit(r1, r11, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x401) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1, &(0x7f0000000340)=""/175, 0xaf}, 0x0, 0x101, 0x1, {0x1, r9}}, 0x4) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000000)={0x1, 0x100, 0x9}) 04:47:00 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) r1 = syz_io_uring_setup(0x549b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f0000000080)=[{&(0x7f0000000580)="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", 0x1000, 0x3ff}, {&(0x7f0000000340)="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", 0xfd}], 0x2a00000, &(0x7f0000000180)=ANY=[@ANYBLOB="6e725f696e6f6465733d32522c0001c5a24ec8adba9512863d2a8c8a1dd88867ebfce23962f4e1ea02edd80789d4c559886c8cdacdbde8ad44235359049b474e881a7d5b5bbe9f92efccbb2d8d546a369a3e90d434023fb4057b8a5bc0bfa3"]) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:00 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 04:47:00 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 04:47:00 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x2010, r5, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3158.619607] FAULT_INJECTION: forcing a failure. [ 3158.619607] name failslab, interval 1, probability 0, space 0, times 0 [ 3158.622095] CPU: 1 PID: 14258 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3158.623577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3158.625387] Call Trace: [ 3158.625974] dump_stack+0x107/0x167 [ 3158.626756] should_fail.cold+0x5/0xa [ 3158.627602] ? create_object.isra.0+0x3a/0xa30 [ 3158.628611] should_failslab+0x5/0x20 [ 3158.629444] kmem_cache_alloc+0x5b/0x310 [ 3158.630329] ? mark_held_locks+0x9e/0xe0 [ 3158.631233] create_object.isra.0+0x3a/0xa30 [ 3158.632181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3158.633306] kmem_cache_alloc_bulk+0x168/0x320 [ 3158.634306] io_submit_sqes+0x6fe4/0x8610 [ 3158.635262] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3158.636471] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3158.637802] ? find_held_lock+0x2c/0x110 [ 3158.638921] ? io_submit_sqes+0x8610/0x8610 [ 3158.640116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3158.641357] ? wait_for_completion_io+0x270/0x270 [ 3158.642382] ? rcu_read_lock_any_held+0x75/0xa0 [ 3158.643359] ? vfs_write+0x354/0xb10 [ 3158.644158] ? fput_many+0x2f/0x1a0 [ 3158.644933] ? ksys_write+0x1a9/0x260 [ 3158.645713] ? __ia32_sys_read+0xb0/0xb0 [ 3158.646602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3158.647704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3158.648842] do_syscall_64+0x33/0x40 [ 3158.649624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3158.650739] RIP: 0033:0x7f0301185b19 [ 3158.651548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3158.655685] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3158.657731] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3158.659580] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3158.661157] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3158.662696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3158.664271] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 [ 3158.677256] FAULT_INJECTION: forcing a failure. [ 3158.677256] name failslab, interval 1, probability 0, space 0, times 0 [ 3158.679692] CPU: 0 PID: 14262 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3158.681186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3158.682949] Call Trace: [ 3158.683522] dump_stack+0x107/0x167 [ 3158.684306] should_fail.cold+0x5/0xa [ 3158.685118] ? create_object.isra.0+0x3a/0xa30 [ 3158.686081] should_failslab+0x5/0x20 [ 3158.686888] kmem_cache_alloc+0x5b/0x310 [ 3158.687750] ? mark_held_locks+0x9e/0xe0 [ 3158.688626] create_object.isra.0+0x3a/0xa30 [ 3158.689553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3158.690636] kmem_cache_alloc_bulk+0x168/0x320 [ 3158.691611] io_submit_sqes+0x6fe4/0x8610 [ 3158.692529] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3158.693590] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3158.694616] ? find_held_lock+0x2c/0x110 [ 3158.695481] ? io_submit_sqes+0x8610/0x8610 [ 3158.696420] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3158.697444] ? wait_for_completion_io+0x270/0x270 [ 3158.698468] ? rcu_read_lock_any_held+0x75/0xa0 [ 3158.699454] ? vfs_write+0x354/0xb10 [ 3158.700262] ? fput_many+0x2f/0x1a0 [ 3158.701030] ? ksys_write+0x1a9/0x260 [ 3158.701833] ? __ia32_sys_read+0xb0/0xb0 [ 3158.702707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3158.703816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3158.704916] do_syscall_64+0x33/0x40 [ 3158.705708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3158.706792] RIP: 0033:0x7f4e9e99fb19 [ 3158.707583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3158.711524] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3158.713170] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3158.714693] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3158.716217] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3158.717746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3158.719271] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:47:17 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 04:47:17 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$cgroup_pressure(r4, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000040)="543637b77e0522f1ef6e7e2bec75b6473303aa74176ba8ec69a8e1c357d0351fcf29f2ef7bec5a2dc060c0db9abaa13ee54edea850c75f9e3d9c07d7175ff2bfa790efd659d1bf16995d5622fc116d9b68085315b16a03eb158103daa7ff08caa9b659e11e9233cde91c", 0x6a, 0x3ff) fstatfs(r3, &(0x7f0000000340)=""/178) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:17 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 04:47:17 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="99ce9bf6d2ae218c", 0x8}, {&(0x7f0000000340)="b2c4eef329e753a6ded9bf06732c1dca8600970fe8581db430467767a827ec5dbe772e803df0d7cc21b9c3a571e441edd6fcfa16b1ec0fb64c9ac74336916b1cbc17cb382e03072b924a04af70b06675cecf97dbd05ea88f4b161e2ab228c30242df941cd7983dcb7d84f215586965fdabbb7e1e52de9dbd9c61bd6a742cca4ecb773075f302d642dd289fbc1d68b1de307ebbaf05c019278e96ca69df88afcbbf0900f9ca24442fd8fe60d0cf1bd41574788268b69c9466719f37fb8fc64e88607e15397a62e2", 0xc7}, {&(0x7f0000000580)="616caf7133e8652558a7a7a27757ad50bf0fc202c503120d614f686c93c32f66cd1cefbb4f9daead7179b039b9ec74b4da6da04de3cba5d6065add7d37dd244e994d009734924dc930bd1bdf26dcb96068b9a6bd125749981acac08099b815bacf79c519cd942d8d57b2715a825636fe58a5f1d1ec1ac562b40c5e0ecf898789056c24b346d99533ed6ecfac89f469c9cbfe4d76720c55ce8a2e233cde", 0x9d}, {&(0x7f0000000080)="4fc0090d7f48324721335d16f97d5fd71183c3b0323953f1f22f1fffd6f8aba723db96191f5b28e7c47cec4752d7180a2e92d3d98348b9c4ba970a684d35c68f0e8c41fc9bf98f8edd1e54d14d02", 0x4e}, {&(0x7f0000000180)="b663509e3a6135a3fc6c327a1e50f00c12438eaec9d3d2a25ff0169fb2", 0x1d}, {&(0x7f00000001c0)="d34d6eefc327b31f2c60dfd1e109fdbb6e420da66ca2226092042d4d401c", 0x1e}, {&(0x7f0000000640)="e2a8cdc61c60bc3bd074810d9211b26ff49cfe276100c9b58b63f3b659f0495884125e56887239ac4e12c53c2454d52f11807df032a2fade49ea6f8522f3b3b3bc3906a1216ac597e44033095876c82fafab085b479aaabda62caac55c36ab9237fd7af99d84271655225268cd28cf3f2b6b41f90cecdd738740f10fe258b6f8e8f56a3ec060c75e2434e21a36227d8368049d09364d08a31b2fb5229273eb5a6c0236db73f420f27ff473e5211cb99e43394f5217519f8af5b3f7994ce5b9c0b404feded924abb4b7919dca86606f761fc94d4af6df54f5da09ef17", 0xdc}], 0x7, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x4000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x7e70, &(0x7f0000000740)={0x0, 0x2e9, 0x4, 0x2, 0x2c2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000840)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x10, 0x0, {0x3}}, 0x9) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3175.997496] FAULT_INJECTION: forcing a failure. [ 3175.997496] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.000206] CPU: 1 PID: 14272 Comm: syz-executor.7 Not tainted 5.10.257 #1 [ 3176.001775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.003646] Call Trace: [ 3176.004249] dump_stack+0x107/0x167 [ 3176.005099] should_fail.cold+0x5/0xa [ 3176.005965] ? create_object.isra.0+0x3a/0xa30 [ 3176.006993] should_failslab+0x5/0x20 [ 3176.007851] kmem_cache_alloc+0x5b/0x310 [ 3176.008784] ? mark_held_locks+0x9e/0xe0 [ 3176.009708] create_object.isra.0+0x3a/0xa30 [ 3176.010701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.011091] FAULT_INJECTION: forcing a failure. [ 3176.011091] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.011850] kmem_cache_alloc_bulk+0x168/0x320 [ 3176.011884] io_submit_sqes+0x6fe4/0x8610 [ 3176.015483] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3176.016655] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3176.017781] ? find_held_lock+0x2c/0x110 [ 3176.018727] ? io_submit_sqes+0x8610/0x8610 [ 3176.019731] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3176.020858] ? wait_for_completion_io+0x270/0x270 [ 3176.021974] ? rcu_read_lock_any_held+0x75/0xa0 [ 3176.023046] ? vfs_write+0x354/0xb10 [ 3176.023913] ? fput_many+0x2f/0x1a0 [ 3176.024765] ? ksys_write+0x1a9/0x260 [ 3176.025647] ? __ia32_sys_read+0xb0/0xb0 [ 3176.026594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.027808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.029016] do_syscall_64+0x33/0x40 [ 3176.029878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.031069] RIP: 0033:0x7f0301185b19 [ 3176.031932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.036202] RSP: 002b:00007f02fe6fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3176.037970] RAX: ffffffffffffffda RBX: 00007f0301298f60 RCX: 00007f0301185b19 [ 3176.039620] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3176.041271] RBP: 00007f02fe6fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3176.042918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3176.044574] R13: 00007ffe95d1d00f R14: 00007f02fe6fb300 R15: 0000000000022000 [ 3176.046258] CPU: 0 PID: 14274 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3176.047520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.048966] Call Trace: [ 3176.049436] dump_stack+0x107/0x167 [ 3176.050069] should_fail.cold+0x5/0xa [ 3176.050732] ? create_object.isra.0+0x3a/0xa30 [ 3176.051529] should_failslab+0x5/0x20 [ 3176.052194] kmem_cache_alloc+0x5b/0x310 [ 3176.052909] ? mark_held_locks+0x9e/0xe0 [ 3176.053624] create_object.isra.0+0x3a/0xa30 [ 3176.054383] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.055270] kmem_cache_alloc_bulk+0x168/0x320 [ 3176.056070] io_submit_sqes+0x6fe4/0x8610 [ 3176.056837] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3176.057690] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3176.058528] ? find_held_lock+0x2c/0x110 [ 3176.059229] ? io_submit_sqes+0x8610/0x8610 [ 3176.059972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3176.060817] ? wait_for_completion_io+0x270/0x270 [ 3176.061650] ? rcu_read_lock_any_held+0x75/0xa0 [ 3176.062445] ? vfs_write+0x354/0xb10 [ 3176.063107] ? fput_many+0x2f/0x1a0 [ 3176.063734] ? ksys_write+0x1a9/0x260 [ 3176.064395] ? __ia32_sys_read+0xb0/0xb0 [ 3176.065102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.065998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.066882] do_syscall_64+0x33/0x40 [ 3176.067520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.068399] RIP: 0033:0x7f4e9e99fb19 [ 3176.069049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.072166] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3176.073446] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3176.074661] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3176.075882] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3176.077597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3176.079517] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:47:18 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:18 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000000000002e2f66696c6530001be8de313f7adb083d77bf981e7420e921b0d69af8faaa19324472540e2e95b66a06ba4eaa36e4c7193d5c7d55711f71e917e4a739eaf65a3c4b0878fcb8d3aa334bf908947d5f2ea68630e16144df9c9fe305"]) syz_io_uring_setup(0x1912, &(0x7f0000000080)={0x0, 0xa493, 0x1, 0x6, 0x147, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) io_uring_enter(r6, 0x180, 0xefe9, 0x2, &(0x7f0000000240)={[0x9]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4fb6, 0x7034, 0x3, &(0x7f0000000000)={[0x6]}, 0x8) 04:47:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="00001001", @ANYRES16=r1, @ANYBLOB="100029bd7000fcdbdf2515000000240007800c00030040000000000000000c000300010000000100000008000200010000006800018008000300c000000014000280080001001800000008000300990000003c000280080001001b0000000800030081000000080001001b0000000800020001000000080001000e000000080004004000000008000200040f00000c0002800800040074070000"], 0xa0}}, 0x20004015) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0x290, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x34}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x14}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xb0f1, @rand_addr=' \x01\x00', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ec9}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000}, 0x4004000) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:18 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4dbc, &(0x7f0000000240)={0x0, 0x97fb, 0x1, 0x3, 0x381, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000380)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r11, 0x80, &(0x7f0000000000)=@x25, 0x0, 0x0, 0x0, {0x0, r12}}, 0x5) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:18 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x77da, 0x1, 0x0, 0xffffffff}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x0, r6, 0x1, 0x1, 0x5, 0x5}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000340)=""/133, 0x85}, {0xfffffffffffffffe}, {&(0x7f0000000400)=""/185, 0xb9}], 0x3) 04:47:45 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x5, 0x0, 0x3, 0x5}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 04:47:45 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 04:47:45 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3, 0x100, 0x0, 0x6, 0x3, 0x1}, 0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 2: r0 = syz_io_uring_setup(0x5c85, &(0x7f00000002c0)={0x0, 0x9249, 0x4, 0x100, 0x2a9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x50080) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000001700)="bddaacc6459a4a806dde65755f916ec5fdec41e0dd9acf043e80aa4534dd27c671e0cd73791f7fff1fd59757598777413cdb1e8fced8817e35938d1d18964f2b0d66dad059d5bbcfaa990a9b595d55fb0cff483c55332eecd401c44a70eff54d2453604ae6d3c07988ed270ceffde9f81afb3fb7ea7912cbbd86de5c012c9e350e1ebff015335703f49cae8770c1ceb8facfb098bd9a205efee9d625a309f095c4a1ef1642b0e774f57637a3603f83a7db7bf1dbefbc734e79de65ee39befe9b8390914dbc66abc6055d", 0xca, 0x8050, 0x1}, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="fc7a6e8d3aaeceef8660a89793eb68f553c26ffc034bcb805c338d5c96f21f77e29b35a552822be2badc50d0e30bf83149d52b5ab7203c9d728eaa67b97b23779b0d7ac120a7736f4853a6a5d84427b15e26f690991ec9f828ccf24b3cd2f4150bceb4ea51abc0b971a2d8057bbad8affb037feb2e9463be5d4e07be88c3183afc7a9055bbb824609d65f3f67a2ff42d8b05018862a61bfa7c658fb51856ac0291aff67aecb0e390e1bd771a5db066fd16a700935cb01573572a170c88ab79513676b812f272b6047d2c477256af5291fe150703b8e232329e938eb839720d91ed597b3c", 0xe4}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="548620d24a2113f5764b97c339adbe03082b37978c3c974538506ce275507fd9462fdf92c3cb0129a9850609c1682af5e32e34d80a174ca88f8413d0a4914690c92412c995711f75fc04beda8896ee3a8f167eeb1d880bb2d6762e3fe53cf835c104ab5f5ad7280844ce8b6f97cf5c49fcfdc5d458cc81a02a3381f01bb75fbca326cf3c8198de8c9eca5020ccf49a0b5db4bedab1380d72ab170f121fe41c980ec40c70338d4d30d7876f635c07e051d1609ec9d799cc0f44c4609604bf", 0xbe}, {&(0x7f0000001640)="bb4361ad3cdb012cbbf0587048679d993f3d52099ea7ea57f52653588a5e46a61451075f20afb2396adfbab3fa7f727761e63bec250a34089e16a877ea658e5061ecc9f37f87558e8ef2b39bdd0dd521f3b521ac86897f5e12cddb645bfcf273eeed6de4af41ac13bd7c94451d33cc9bc863078b6208adca7b37f285030e3317ef9284e432fd21f0af087ce93e2c565a376576513e0f286f385a8af3866fbd7fdbc0d3bd87d1fae3fec9e784", 0xac}], 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r3}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x1000, 0x5}, 0x80000001) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r9, r4, 0x0, 0x4) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x50801, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10010, r10, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x20200, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)="b608f5e6d870aaeeee059805965e76a16cff5b619697d4856cf1293f8e81af3665f8eeb84b4ac1116016b8c1ff642e9a8a4887b3c4af3f8a6d69c1dbf0b5bbc114d3e137770bf3a6dbd6dc92d93d9511275dfb06bcb4efb09d6cd2a6dae11141966db15a06e4f522e2db616518b52d2456a1da967bfcb23b3d02e177c8c21c6ac6a30586a0f9533c3294be49c5c861965a11f0f1fba6bb9a696e8bc31db0959b4d4a8e7d29f50ee996ead89146605035fb051cf1765ff47fa10f89a3ae46f98807a9a8353d0f7ba8deacfcceea42b2462215623bf821d9c4bf4262194795397044bb919f55", 0xe5}, {&(0x7f00000000c0)="851039b53cc704c21562d21bd8ef759f00988b3a614e5fcf16c37eba5b072f955906443304c51485fd568b107d587ba254f30bd1559f5b6e30f692fc862eab3c", 0x40}, {&(0x7f0000000440)="cbcb2a600917a5b282520278dca79062ad9dbb76ffc22140ba3eb0befbecb2b3d5d36a64968390d9207ff8f21248e5ebe8955707ff65e1e1778d1d02037d8846f9273f564cf62b03bc7f7632e9996dd19ef584490144dccafb4a2be9c7729649af48a7f198ff43027a394967d7b2b90196b03cb113f2afd3468a62934663dc53ecd81dd53f063dc84cafea31e35fdb89db0fb87f7dde59d76a3737a221d45d54f71932d2c08c9d597e", 0xa9}, {&(0x7f0000000580)="0cf4df0e4c7926b3be942fbe092280566afdaf957d6a03e59247a6e7bf3ff437fe1acf4119f22f63ba04e5bf147bcab805f18daf45866936d848d54eab20c8b2052b69ccbab00c8e54f187bbc94eeacaaeca4fadded622ad0cb2a669b6b3aa564f63ae73a3614955353cd53e80b15a6d19d5919c93781bb397186bc23e5017033f872f2fc5c6b7501a9f7976b29029e6e118e1ea82460bf874fec043780e61a26ef5a7c8d57ad775bc45e4e34e0740889200512ed102231ed34acb908eaa8ab55730337239640469066b", 0xca}, {&(0x7f0000000180)="852df042ae8e4cdad3454ed970eeb590fb791331b336832dcdea5f6bacb797cf31a40d14bec140a1903cdcd61eb9ef5267ea73e023b6d41db9369d98649123fa789853fda0b329d315dbbc0dd08421bab0de1abfd88972b32d009f33ddd52410b54edecde9f260887942655fc021d636746f4a5a157a305e8c80", 0x7a}], 0x5, &(0x7f0000000500)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x24, 0x0, [{0x1f94f73809de68ba, 0x5, "b16954"}, {0x0, 0x8, "2d68f4740f92"}, {0x7, 0x11, "ebdb609d64b06a660b6b980ef11770"}]}, @end, @ra={0x94, 0x4, 0x1}]}}}], 0x40}}, {{&(0x7f0000000680)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000006c0)="8af40a0ccc3bd523b24021a179296a90bdc9a6b99da6a99f729400dbe08c62f7673550801d2f2363fecb8d", 0x2b}], 0x1, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x86, 0x10, "6543adfd7d91bafa2fab6c243655"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xeb, [@empty]}, @generic={0x88, 0xa, "766c651dc4abce9d"}]}}}], 0x88}}, {{&(0x7f0000000800)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000840)="eeafbda4cbab1c43257e9b2c754bd0033fa570a522d3fbe7323da972ce6f40f9bf44b9978b0e6e16911eb76a714a905e417edcdb6f4fa285a86670c075b1ddb021e7e0285de6354092ac3987aad3f859a1d998af0384b2b4f805aaa2b656e0ce21105058236ce1292cebfa61a7526719b0339fa94246e6f985d8c61286143f1a2e2ed62cf4d9ded4ba968b82028862cfad2ccfd4467074fd0901541d42d4dd56111d62a0781990bd99f2c1bff777e741103c4cb8cad7e642a90dd138aacffdf5e23a660df793", 0xc6}, {&(0x7f0000000940)="571a121cbdec2b4f4273fecb73a44f6b733883cfaa82e2e07c397afd7b58cef68ff7b062615a44ad89ed437760c532a7e219e9a6c9222eb13a7f58e1918934221e94027c1d1e5ea05f9d7334c6253075d8b41f5942352f6feb5d", 0x5a}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="94bd6ec8b0e2916c99012d986fa6313a89236c846e1d2f69b005491c685836f9aef27527867ec286b979fcdce69089687908370e6d24d803da74f37e7c738d34dff90fc3710a582febf3be120a1e19c330ee717184c876e090f3cc00a43b33a6aca4edc5a2fa238d553b697a93738f3766db14bedec21e3911333a3964cc2f21de03a8cad88b299c6d9d708365896a928ac955c4a8a914e583b4d7c369caab482ef80e289392978f58b9c84093c2c742b7eef2f35f2e82", 0xb7}, {&(0x7f0000001a80)="f50570708ed102db39ea0a5e4eaf2addaea27c416fd35326b72806541e898a3fcd0066f8a59acf6a30e9cae8617965612cdddd6fd9beb4f8edd142ddac722de9bb0214d2b748", 0x46}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="569527877b9f5ca002025a568b62892608ce27fd51520482d30dcc5a763f3caf0bbe82b1224abcb4b58a02b1c770d052ba3b2a0ccf8c1849c3fff3803d8c28f49569e583c8c5a90e7cb5f2ada1f1a834923c974401c796fc153244a7224b76770087b0acab3eadf69e502cca7a18721698556ff8f8a6450c01a58a5edc2fd0133b66e4ff26225f132e0c1413ccf79de6158fea9a1954d294ed2d9881036270aed676afa1634876b7e84371b324a755c83408de11822ff56494546ff93b61124170257380f71f92508463b5b40a368136a6d7c89138a612124ccc6e156c0095b9ce69b58cd78dddddac32e36e21490c98a3", 0xf1}], 0x7, &(0x7f0000001cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x516}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010101}}}], 0xa8}}, {{&(0x7f0000001d80)={0x2, 0x9, @broadcast}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001dc0)="781330285abf3a98cc2f4403c12294781d79a56cd874c61073607651d43aa02c3ec4dd706ec8379f56b02c9169a6e1b08dfac91497e4ef4c42a1f20197349c51cf6cd5de37cf747badc16c4a54a91616dad77da295ec470d0524d63d02f5150183a9ac2372eb571d1c0af2882be68e67697ca10883a95d95e75e78c6a279558944488b16a3849cfa3084b71924317a8159aeb95cecc17162665e7fe3c1abd3147439149e2f7da4d695c4da15a9a99f521e8d5041578926db2af196b5dba427fc63b922e8482d047bb0c0411634a4aaa6730189bed10969623c2f6d84c99faef5a42251070b9f297e53624a5c", 0xec}, {&(0x7f0000001ec0)="5860bcecb08cd5719611ae316cf1a938765ddea49b09b83b258f61ebe6c7e877c7d5331644fa1207d5d7ccbb25f517b7bb009819010cdb772067ffc3ff78dd08c7299017e1f241d504f9ccef694074656361af4486c94c6ef2fe0a12c2545170c75e9ef8ed27fbce67fbea4d953eea13fc99a39d27b112a23abba7167f719532ad4584714320881e9cc53e5569002b6d3f1315bb4ffe22f98a606176eadc3acec5823cefd122a52a26580cb4882c5f975f8180d019701acd857632551cc9d63abdae8d8de7331daa3d5899264ac37f204ff381d6c6f840cc978e4e", 0xdb}, {&(0x7f0000001fc0)="10ad060de5e9184cdc817375eb225357a4ca1d266b211b0e566c1f174765efbb70767686ddc8641a586c9794c062df15175891e4384ac98e3907540433f73e0495522959b264095dce7a097446670edcd814824a239490dc5a73fe5851370c23bfde2b6a8a63495737082143bcf4935246fef8b3732347b8b9e9534d9b", 0x7d}, {&(0x7f0000002040)="5271172a1f4a23023ae3e20ca2f44dc7ee3ee8da8ec753ad61949a9740ee0fb8d26230753f0f75", 0x27}], 0x4, &(0x7f0000002140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x5a, 0x0, 0x1, [0x10000, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0x8, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xdfed}]}, @rr={0x7, 0x13, 0x6e, [@local, @multicast1, @rand_addr=0x64010101, @multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x128}}, {{&(0x7f0000002280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003400)=[{&(0x7f00000022c0)="640b65779668823f052767e1d2a0b2cad3a429635f6faae81fd67d4d7fd9e310272dbc2c2e166304169dbe8d884e46c5c519846e117334b5424752cfa0b0b9a9d4ecf7cdbc92a5bc0f956b5b0e8c7abd97eadd20db7aa06ab4c4a681416ded28e02eb9444d0209d1573e9a57842fe8a6be5238e5ac4e0282046df647253f7611f76e32e1c33fa10c780a5b2af91417839fd1ed116703bc0975", 0x99}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="1b567a8263bdff1cd2ff23368e7ee16b5915fecb9196cfe5633dd00da587de0deffdd06be25ccf3241dff3405dba4de2dc4dd107ce1295b7160ff771acb5fba73f4821ba79a5b511f9e4c019337c3fe39c2f47d71993", 0x56}], 0x3, &(0x7f0000003440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xad, [@broadcast, @multicast2, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @loopback, @remote, @broadcast, @broadcast]}, @timestamp={0x44, 0xc, 0x30, 0x0, 0xd, [0x8001, 0x2]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0x6, [{@remote, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x120}}, {{&(0x7f0000003580)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003640)=[{&(0x7f00000035c0)="3bb18acfb18a86060624b0435748f87c09004328f2f8b4cee7766dcfa3d1", 0x1e}, {&(0x7f0000003600)="87f3a034285045881014202b7ba329ff69168e90e6f48d7b9523412eb5bf3693135ca20f4b62d70e6a34d31177fd3aaf44422b3f13656c3e4c36e2", 0x3b}], 0x2, &(0x7f0000003680)=[@ip_retopts={{0x64, 0x0, 0x7, {[@end, @rr={0x7, 0x7, 0x27, [@broadcast]}, @end, @noop, @ssrr={0x89, 0xb, 0x5, [@local, @loopback]}, @ssrr={0x89, 0xf, 0x4e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}, @lsrr={0x83, 0x7, 0x6b, [@empty]}, @timestamp_addr={0x44, 0xc, 0x36, 0x1, 0x0, [{@rand_addr=0x64010102, 0x1ec}]}, @lsrr={0x83, 0xb, 0x4f, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast1]}, @lsrr={0x83, 0xf, 0x45, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6c00}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_retopts={{0x110, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xa3, [@dev={0xac, 0x14, 0x14, 0x18}, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xf9, 0x3, 0x8, [{@broadcast, 0x40}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x65780}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}]}, @cipso={0x86, 0x4f, 0x2, [{0x7, 0x9, "016b12bc62f614"}, {0x0, 0x12, "d2386b997ce3adf946ce1b4f18495109"}, {0x5, 0xf, "fc624dab960b75ce60fc8bd682"}, {0x6, 0x8, "7016667fbadc"}, {0x2, 0x2}, {0x5, 0xe, "7cf5a0d4755572f8991b1ec4"}, {0x5, 0x7, "dd7dc7e700"}]}, @generic={0x89, 0x9, "96e46ac2e8b7fd"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x51, 0x3, 0x3, [{@empty, 0x8001}, {@loopback, 0x7}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x9}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x27, 0x4, [@remote, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2, @multicast1, @loopback]}, @rr={0x7, 0x13, 0x46, [@local, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}], 0x1a8}}, {{&(0x7f0000003840)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003a80)=[{&(0x7f0000003880)="c5", 0x1}, {&(0x7f00000038c0)="e68022b61badaf071e5cb8de6a849707439184fa820624142c44c25bb4deff14fc724677207a4a48a63a3d4e31d334cec2bb83409997913c227239f7a858fbcc643a26f26a5bdb91af17b1872bf78446275e7f62c856c947c2aded9f39561f0100f1489ebbb4ba", 0x67}, {&(0x7f0000003940)="2f31bbada277160f351fede4841443db9c6d4c65f3d1828b5d260eada2a18c8ed7d419720e5adadc456bb5bd00ab6803a159e42b31ff7edb0b38ac6e61a0a0284cc9579beb59aa53a18d6dd218cd48aef1b7dea08dcbb70ce76d032fbe59f50c4ac338c7dd086c778f845b6b1d6e220bd652f5bfbec2ca16afd2e12c54a8fa7ceb7a34a12ce13eafffdaf455b6467e7b5ecd7587d0d5acc29b34148c80782205a73ed3ec7ddb8faabdafc9ca4ce075cdbea5d588b265ff", 0xb7}, {&(0x7f0000003a00)="4e641cd3aeb803cfdc5863eec1167c8bbd28a85575d8e90d59ebdd024eae73c287bff4a40840cfa052313fa2ef5b27dc00dea0bab8", 0x35}, {&(0x7f0000003a40)="e281b0451a975b7e80b9d2cab2d46a4f964d0f69567f5c", 0x17}], 0x5, &(0x7f0000003b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6b}}], 0x50}}, {{&(0x7f0000003b80)={0x2, 0x4e22, @rand_addr=0xa1}, 0x10, &(0x7f0000004cc0)=[{&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)="a02b2bdc5388723b8deee6a737432142f820fc490b31f081ef95f6e351e6b3bc61082b2387f14e9a904ffc253cdf6f5a616eaa9c985293e253cc31069e2501966c4a23ab", 0x44}, {&(0x7f0000004c40)="a46e3cc46e2dab0b713bf3f73057ce9cdfc83d3524fdaf976a77c54f73ade6b02a78da13df9f1b0ddf94f7e896a0ebeaa94cf8de815cce4aade925ff2f24af749339e4328816be2a669b1b9b1309e659cecd9acec29ef10e7428f773461e7be9f36d97a75e216ed5d6", 0x69}], 0x3}}], 0x8, 0x4044050) pipe2(&(0x7f0000000000), 0x800) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x8, 0xfffffffe}) syz_io_uring_submit(r12, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x3edf, 0x0, 0x0, 0x0) [ 3203.460694] FAULT_INJECTION: forcing a failure. [ 3203.460694] name failslab, interval 1, probability 0, space 0, times 0 [ 3203.463277] CPU: 0 PID: 14309 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3203.464767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3203.466485] Call Trace: [ 3203.467037] dump_stack+0x107/0x167 [ 3203.467800] should_fail.cold+0x5/0xa [ 3203.468606] ? create_object.isra.0+0x3a/0xa30 [ 3203.469557] should_failslab+0x5/0x20 [ 3203.470346] kmem_cache_alloc+0x5b/0x310 [ 3203.471186] ? mark_held_locks+0x9e/0xe0 [ 3203.472047] create_object.isra.0+0x3a/0xa30 [ 3203.472974] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3203.474027] kmem_cache_alloc_bulk+0x168/0x320 [ 3203.475005] io_submit_sqes+0x6fe4/0x8610 [ 3203.475906] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3203.476960] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3203.477963] ? find_held_lock+0x2c/0x110 [ 3203.478816] ? io_submit_sqes+0x8610/0x8610 [ 3203.479717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3203.480736] ? wait_for_completion_io+0x270/0x270 [ 3203.481741] ? rcu_read_lock_any_held+0x75/0xa0 [ 3203.482703] ? vfs_write+0x354/0xb10 [ 3203.483479] ? fput_many+0x2f/0x1a0 [ 3203.484241] ? ksys_write+0x1a9/0x260 [ 3203.485037] ? __ia32_sys_read+0xb0/0xb0 [ 3203.485895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3203.486992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3203.488082] do_syscall_64+0x33/0x40 [ 3203.488880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3203.489950] RIP: 0033:0x7f4e9e99fb19 [ 3203.490731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3203.494569] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3203.496133] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3203.497606] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3203.499082] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3203.500544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3203.502079] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:47:45 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@remote, 0x51, r7}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:45 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) syz_io_uring_submit(r7, r10, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0xd158258f9ec2127e, 0x0, r12, 0x0, &(0x7f0000000340)="5079fa49aa335e4dd2cd5a7789ab2e66bdf0d02dc270af120e515bf463b36285abb0de3003aea46f19cb0d4209a57e99c1a2302c0943daf6ab61a5b4b2470a44c45f6024a1bf934cb0f7db8df6673d92ee4d629c910d9ed8b26777524630bdc5fba4556bcce0180c8778ae17a7daccef98b33e61a2b193af9bd28b2d8e07afa4bf73304af8d4e601a6f2acad7010803fbd3a843cee2a", 0x96, 0x4000}, 0x3ff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)) 04:47:45 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x8, &(0x7f0000000880)=[{&(0x7f0000000340)="fec295f90ad5f102ae555866b16a555c3a2762173c560f0f8df2d74df22ef8b7503be1cebbca3aeb1730834562eb7637757cf2b3a7500fec92b2187b54af9a76839efdea4ffa88cf13db4899fe7385a2e7089349ee7959c71ddea2f701c3ddf1bc1a12b860ef813803999315bc4696016aa471c653ca24ea275c3d80d11b8b35db349cf245cd1b8d546aff04bc9a254be29f9aa67db7df88191a7044175d5c9bef5c272d7f6420d22b9352e298efc7d8d992d7a425359b5a5e8b46b4", 0xbc, 0xea3}, {&(0x7f0000000080)="99f2974d39535800e526d25cf55b5344d608a63fa818a4c015a5dffd832893899275ebda78382e0ab57dcf51a5", 0x2d}, {&(0x7f0000000400)="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", 0xfc, 0x80000000}, {&(0x7f0000000580)="9f9a230e6d99effa4347812abdcd0bcd5e0fd0b8e93f17ead874b807b29ec070f72babdc4f1e848d927ef206149ef36658948831c2c2c9bcf179e3845f3d05271c2c5bd39ab4ec72bd5c0cb32e14d21d76232f3dd93195fb991f0f3b46a8c979211ce1f83483b360f83e455ccf378cd35d6b436f912ee891c905b3eaa5b8b58bdf8b7bb302b7328f71eee3f884cad67aab41b324a07b1b99d3359b11fc5f11b38a858fc1b415794a4c4b0d2520f28e81741d4dabb8ff75fa1cf12ebb904a8db105e05589806d80ed87898f333f1464f5872caa60c13c82b1", 0xd8, 0xfffffffffffffffd}, {&(0x7f0000000680)="2d0e89899ff155ac40aa828bdf2d4b62fa1d1ecefba94b49f959813e6bb6df439c874e10578f486e7fd07f275486923ab13171c834a2344958ce8d3675716b5b5de11babe416d90a8125ae0c5fb284e6425321062f93f48d34d1260aabd5b499455618b0c54c553ea7cbf21cb26af383f76ed245f672c3f18eb982630c19fde296c9fd80751151f54fea1a6afa7f95de56c3722dec38dccb5bd26784627b474d1e3c37572028f071d2abd41b0d307ee8476e5630c9a432e01d51bc1d991627f9a639e28509d7bcc8b2a2e34641b9836bff89af3d83125f6237426ada5b9715d2", 0xe0, 0x100}, {&(0x7f0000000780)="b9a4b77864dadd4bea28438125c73e4e39ab6e92824a2ab5f824d56c6e7d06353085963341b9ef720473a47a1a2ac570cccc0194beb9601c5be7a4ea2fa75ed5bde709ef2cffa5866da8cd0f0d13386a9d534cf547a21a734b9fe326fb17b5f2950224b221c34547f33b3fe50302198d0848403277c9026a6bd21372f073339f2f257f8c5382dfc1282e44d861a0916bed8688e71442921d1a7c3fdee66d06380fe3403117e75bf16782e6c08cfc296a07f1cc09bbef8d0a019fc24b71c66e4a4dd87c2355e2a0e2a76dfa19e9e4e1ebb62f335912589b", 0xd7, 0x7}, {&(0x7f00000000c0)}, {&(0x7f0000000180)="349e1dd577bbb69ed355e8c1dd2aee0a33a488e081e3c0367357a17d9f3911e86a723ea53a04546ccb058f8ba34a702defba68c69d2afbb4b5392d3231303869fcf66c681dc5518807503bd04281f644f5437502c627baf36476117df1edf3233f2e7d6a07a0a4602ac450", 0x6b, 0xe95b}], 0x280000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) r4 = dup3(r0, r3, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r4, 0x8000000) acct(0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0) 04:47:45 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:46 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, r6) chown(&(0x7f0000000080)='./file0/file0\x00', 0x0, r6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x401, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="8ccef7015b4963c93578a32d3e423a20fb8467cf58f257866bbf7825ce33be4011e1de037d08432160e10af53f9d55", 0x2f, 0xfe}, {&(0x7f0000000180)="b066c369d10550ca6f80d6e2d1", 0xd, 0x6}], 0x400, &(0x7f0000000340)={[{@dmode={'dmode', 0x3d, 0x6}}, {@overriderock}, {}, {@nojoliet}, {@session={'session', 0x3d, 0x26}}, {@block={'block', 0x3d, 0x1400}}, {@gid={'gid', 0x3d, r6}}, {@utf8}, {@unhide}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@dont_measure}, {@audit}, {@smackfshat={'smackfshat', 0x3d, ')'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '.\'&('}}]}) fchdir(r5) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0xffff0000) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:47:46 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 3204.052617] loop5: detected capacity change from 0 to 1024 04:47:46 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3204.111560] FAULT_INJECTION: forcing a failure. [ 3204.111560] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.113974] CPU: 0 PID: 14353 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3204.115419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3204.117160] Call Trace: [ 3204.117728] dump_stack+0x107/0x167 [ 3204.118509] should_fail.cold+0x5/0xa [ 3204.119328] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3204.120452] should_failslab+0x5/0x20 [ 3204.121270] __kmalloc_node+0x76/0x420 [ 3204.122099] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3204.123189] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3204.124259] ? trace_hardirqs_on+0x5b/0x180 [ 3204.125198] kmem_cache_alloc_bulk+0x182/0x320 [ 3204.126175] io_submit_sqes+0x6fe4/0x8610 [ 3204.127098] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3204.128170] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3204.129216] ? find_held_lock+0x2c/0x110 [ 3204.130096] ? io_submit_sqes+0x8610/0x8610 [ 3204.131031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3204.132036] ? wait_for_completion_io+0x270/0x270 [ 3204.133081] ? rcu_read_lock_any_held+0x75/0xa0 [ 3204.134077] ? vfs_write+0x354/0xb10 [ 3204.134880] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3204.135856] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3204.137017] ? ksys_write+0x1a9/0x260 [ 3204.137834] ? __ia32_sys_read+0xb0/0xb0 [ 3204.138712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3204.139829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3204.140934] do_syscall_64+0x33/0x40 [ 3204.141808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3204.143199] RIP: 0033:0x7f4e9e99fb19 [ 3204.144215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3204.149213] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3204.151164] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3204.152739] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3204.154289] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3204.155840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3204.157574] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 [ 3204.232206] loop5: detected capacity change from 0 to 1024 04:47:46 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x8000000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x2c0100, 0x0) fchdir(r3) syz_io_uring_setup(0x9, &(0x7f0000000340)={0x0, 0x33f1, 0x20, 0x2, 0x179, 0x0, r3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280)=0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r5, r4, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd, 0x0, &(0x7f0000000400)="296ab4f5353ff37d77dabb64e944e858942dc7a9f9ca6be3e6f169ffc6062c729ab632e9f0ed3ef99dae41431fa4d52327a13d07df5a178d1c04ab355faec864c69c70f4ae4d392ddd097c01dbf62f0e4c45421f1ea0e75408e0fc8010441a96514e1a6f8f1a8dafef702daa218506825ae78bc3d75ce3c0e941bac5c297e8b0c0c0071dc47872ed47fe3708d4af85197eaec640bd8822ae36b1e218d1a0dc835506adef491b78010799d6", 0xab, 0x5}, 0x7e) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') openat(r7, &(0x7f0000000000)='./file0\x00', 0x406000, 0x14d) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, r3, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_io_uring_complete(r8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x30, r9, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000180)={[0x10000]}, &(0x7f00000001c0), 0x8) 04:47:46 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x401, 0x4) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) sendmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000040)="d378402f1aa672cb12ec7d2a3d80d28dea24fdaf331e495c2d3b92ad8312a8613f8ff936a5557fae8b03a1312332dbd8c6e79e2ccd219707cc77c3342bb840407e08ce6e39a938a8844d8367f190c54265e13a4b22a6f93643b32e924652fdb4c515c81d4c61402256e9a3fb2341a670c59cedb8f0c5177e2bab98f4d35e0dac2a21f58659f27435a947a1f3757bab89d9de2c86e629915f7bf4e9e1c2b503b7", 0xa0}, {&(0x7f0000000340)="fff3e051d1369bde49165887e256a2056230a0f5eb859215a3447ec7cad2e94d4d3ad1d29695206c83202d1afe1bf6e71ffd83e8edaddc989d2a7f0564b242212795724c6444b88d966422a170a3e5b253be33dfd61cd8cb31c30b5cd6cb4f20b0a68057b8449c2c7cb18b505598f730b62ef9f6d847b0bd545336e1f645c3e096bf78e8cd48b640545dca8bd02d2ccd944340d84660ecd9d67a151488bc", 0x9e}, {&(0x7f0000000400)="b3b45bd0fa0f3ea0197780842de171fbdb2ea6331b34586550ff6223f9c9aa1cf20cec474932bff2ab78b0fd3f75f8dcffbb3bd659df2a198b390918738ddd991f7532b080bef554c7ed5342f1f665243ad27ef3266990e0b6a0ea12c9d0137e92e6f6e0454581723c194b199658596fab5f6be98fbe0f45f29c62d24c606a83b11f8ec09771a016a63ad5e78cec191ecde36e5f02c311af651f1ad2ff4c3615ab224ae243c8e7c37a5875976521a7ded680be55388e5551687d425ec11c29cc82e893178fb93b4b87e9be4d33c63dd2711c79c4866758f73dfc5deb97d85328540bbbee6efe591c9abf73252f044b", 0xef}, {&(0x7f0000000580)="877ad733b982f8f8495421036b92c580eb5038b2fe3507d81de15c0bc367f795e386f1e30d4032181754fd6e108ca14efab920995f96e5238c4c47f779de3a3b691a83dce0430454daf08c39ac9d327e6ac6d9fa114d4b6712cfff11baaabbb67dff2744f2210d072dd24ac0649fce737a0340aad181717be24ff3031b36248c1c399473d7c8c439cd112e5e76a5d1", 0x8f}, {&(0x7f0000000640)="d332b93287980c286e3a195a48c99eba6c2f667375b3e7ff0981737310411818a7a4b6872b11a8f4b12cd21d3f3c81c6d62caaa9797d10c2a104219abf2852f4f017d86ba9f05f9900c67f596c78d318aaa55c7fca4fb39136801477a443b20fe4f3ea792458fb79e17ef751ac3cf969ca079c849ba0232668512be08782f3cc3365c91ea49969ed3ad4562ac6a457072903e4c24163afe8307cbb6ae84f4d27221e5fbfcb836eb04b2d253e8598274169deedb2cdc719d210288d38572209b1d0", 0xc1}, {&(0x7f0000000180)="0e9025071c5acef0de0ac5cab3b2d18b6260efcefaca016d5e1686770e65e40c988d8c5ab3bbbb40cd74a69637990f2181d39edb199e200e4211d4666c", 0x3d}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000240)="b4c1dddbdae6a934ee5a0b34cc8fb3195c3c17fa140f2f7fa05fe1d5e9eb5e3f577fc1144ac4e215952ef4624de7007004afa76e42b331843c086fc586c3821db6a442614c06cca2ee0a0b621dbde8d2d846e0e7ae5ffee1e4fec07b167557f7264c0fe76fb19053", 0x68}], 0x8, &(0x7f00000017c0)=[{0x50, 0x10d, 0x401, "c8fb8017c1d2d9648a8229820000e3fbe6e329073a56e8e3c1a7bad1dd732c92011123977f87d31d686d7118db14d69e96810d5cbd46f6ae06"}, {0x1010, 0x104, 0xd4, "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"}, {0xf8, 0x10f, 0x91d5, "7629ac524cba577472c79adea79cb22428c56cccaa235dc12c8d7eb16117728b07bdfed354b953d1b2c4c8094fb692f41328c285d541b045e62deeeae113f32162076d8744c35782a63eef78cda9b036602dd4e939d48882cbeadcebccf22a0f9f4457cd6b3e9773d1bad79064bfe9019f227447d5202edd59730e434a4af1ced5290ede0a04e10fd524b3ebc11bc0a5208bdbcb8defaf5aa6baa312dd2729cbf9775ef294888317115b9e4d717d81b116b19dbea721b974e0eb3bca12d98b08361fde696e0e0c6bf2e605ba2ef856efcd240830c68facb2e5eb9cff2d6bf022cec96dfafca5ae"}, {0x68, 0x111, 0xfff8, "1756955c507d756b91dc2cfb35c81d8a147b205e66f90b3880595785954ffe68f71e4c3dda484eb443f63115cdc464577b3601c43bad1e568ad601aa0fd659b050b83be00b6e65af6d3a0b8b85654d2a1b8dc706a5c9b170"}, {0x40, 0x13, 0x22d0, "af7d8c3341295b4220b1e13306d4e7366b3d61e2386b27f2a81f0ae1419fbc9d4ea38cd90f79c14242ccd763f4a5"}, {0x30, 0x84, 0x7ff, "491a3eba720ae33f12404c76963c7803652eb1f174a7a8b17f8655"}], 0x1230}}], 0x1, 0x4) 04:47:46 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) [ 3204.438245] FAULT_INJECTION: forcing a failure. [ 3204.438245] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.439783] CPU: 1 PID: 14365 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3204.440697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3204.441786] Call Trace: [ 3204.442139] dump_stack+0x107/0x167 [ 3204.442619] should_fail.cold+0x5/0xa [ 3204.443123] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3204.443803] should_failslab+0x5/0x20 [ 3204.444300] __kmalloc_node+0x76/0x420 [ 3204.444828] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3204.445497] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3204.446153] kmem_cache_alloc_bulk+0x182/0x320 [ 3204.446763] io_submit_sqes+0x6fe4/0x8610 [ 3204.447332] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3204.447987] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3204.448621] ? find_held_lock+0x2c/0x110 [ 3204.449167] ? io_submit_sqes+0x8610/0x8610 [ 3204.449740] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3204.450378] ? wait_for_completion_io+0x270/0x270 [ 3204.451013] ? rcu_read_lock_any_held+0x75/0xa0 [ 3204.451616] ? vfs_write+0x354/0xb10 [ 3204.452104] ? fput_many+0x2f/0x1a0 [ 3204.452576] ? ksys_write+0x1a9/0x260 [ 3204.453079] ? __ia32_sys_read+0xb0/0xb0 [ 3204.453612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3204.454297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3204.454971] do_syscall_64+0x33/0x40 [ 3204.455457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3204.456131] RIP: 0033:0x7f4e9e99fb19 [ 3204.456614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3204.459013] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3204.460000] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3204.460939] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3204.461860] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3204.462778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3204.463699] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:47:46 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x2000, 0x0, 0x0, 0x0) 04:48:01 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x800000, 0x0, 0x0, 0x0) 04:48:01 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1}, 0x0, 0x40002000, 0x0, {0x1}}, 0x40b) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x1, {0x3}}, 0x0) 04:48:01 executing program 4: r0 = syz_io_uring_setup(0x4f50, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:01 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x1010, r0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) syz_io_uring_setup(0x71f2, &(0x7f0000000340)={0x0, 0xdaf0, 0x10, 0xfffffffc, 0x2ba, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r11, &(0x7f0000000440)={0x10043, 0xa4, 0xb}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r8}}, 0x1) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r13, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6000, @fd_index=0x2, 0xfffffffffffff291, 0x3, 0x32d, 0x2, 0x1, {0x1, r8}}, 0x1f) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:01 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 04:48:01 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)=0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:01 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152ea815763acb3e}, 0x2) r5 = syz_io_uring_setup(0x132, &(0x7f0000000480), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/210, 0xd2}, {&(0x7f0000000080)=""/91, 0x5b}], 0x4, &(0x7f0000001680)=""/217, 0xd9}, 0x0, 0x40010000, 0x0, {0x2, r7}}, 0xfffffffb) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x1}, 0x5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) sendto$packet(r6, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000001780)={0x11, 0x1c, 0x0, 0x1, 0x72, 0x6, @multicast}, 0x14) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 04:48:01 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x5c030, r0, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, 0xffffffffffffffff, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x0, 0x1, {0x0, r6}}, 0x6ef) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)="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", 0xff}], 0x1, &(0x7f0000001780)=[{0x100, 0x11, 0x5, "6a408eea20a4c212d0038dac02618aa35857966551263c4ff7e2a2eb0a259a952289144f67cbeb8a34d10af84a40817e901836d4fca0df1886a648af341e7588c45378ef03a51f4e9d767758e866e197968a8e7e28e3df92c88c0be46822e009a1dd9a8142de0c0a6aa68ed2450ca76285aecd4899b8b33c7cfca8969040c1498a49930f0be31dd063ecb723c0283c0a2a4e526b884b8bca26c2d96933046187f7ae5b67cd607f63218808245627ceb276d9406997498ddbe477daa98216c6cf4e17ae714b7fb7edb41d412303fb8fe711403f8ca2d4c537674d04110cc92cf301747c69149b3e48861b6dd5"}, {0x110, 0x109, 0x400, "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"}, {0xe8, 0x84, 0x4, "162583fedb8bc47d0b36c398bf61289be3e05b34a53ac959d6442d66d4035d209313aea878e520f68f7d83fbce56ed4ae397ca06221d38991db5259dbfe3b0bbab61583a867064ea198b6717847a12e1c717f7181d687869f5236c9337164a27019e744bc433609d48bce3a4ec0c920ec5e3949cec2cbaafee0e7e6391c6b6e555b7b9c483c863e066962aa110b796b8c6f61f477e9675a14d8b46c483f42150510ec31b6b083fb20e5b15daacb0448ec02d4edc46998bf1c338cfe997bce808886f5699e33cd52882fb89a5eb68db2ba4c5041820d472b6"}, {0x68, 0x118, 0x4, "5399ada59ebef883787c781e9da38d06b0b18c3435da14218050630d889e7f32e983ef5acc0ee55f22fed3187fbccd8cb7703b57b5b9d95e8faf4049552cdbec93eee69af94728f5bc159e601fb5836eb0"}, {0x60, 0x116, 0x0, "ac65456ba45406f2a2ec00fc669313aa4d9814869800b3c8f25a1aadd05c1919af0e71e71e58c802a5180d3aa6db9caeeac9d444acb0c34d7e34e14cfed9e18c63aece9a8c59dbf641235b9f"}, {0xf0, 0x110, 0x0, "d2a5f5700567e987a44e7aee2f602d6fa645b970a46968d5a3f70fe5ab05c34e9252bd7e1462dec3d135dd2c9f12e4ae66012f007df3fc505b810795c8f3987307e48ac2ab8bf8fd4f4c6481071bd84dc8fb8880e17d0a9ce563608d898dea9cd91a69d7a687aa2b9e1704aa506b6805f3fced8d5b4c6f3d78c85fcfeab4deac32f310143bdcfa7b3d78ec55c2466454bf9b74a1cd39e8b5084e8aaf11ac816ae56a41b67a1f8848b9a29b9b0d370c18150b6082a5dc737932e5ff33c8acbd4c0cc5831273f9d47cb997a92924d803a3367660b1bb4348b33d"}, {0x70, 0x102, 0xfc3e, "3aef4b5762aff43a3b2d46494c8acf96e171ab9386cc0634a90e009400070b5b0ca92668307a1515386439bd79ea1849b19e9b669757a8ca229212d8f187ee9169731742d4180ca20b0b75f7a98ba771a3a665d1c95959c2d2bde5"}, {0xa0, 0x88, 0x5, "5d2cd4fe0a31859a7a4143bff46e94e2177cbc25d80fc00b7503cd5baaa87fcb95c840f9f8eef41587eb166a59edf44a44dc5d2b3dc3e584494355f7adce62430cc0dc60a8bb98fc7c17079e4041900d2a35fcbacfd31ef5d24b5dd5cadc36dc03ab5a2708a362c42ef798a7e65d2fa14cbfc4414eef208103f6408101d165321c4c9b17191aabe23572cc"}, {0x70, 0x114, 0x5, "f050bf416a8492086a503ae83820daeee51e5e363109bc5aa4cec513fb6336dcb792710fe2315d2e1e11d9f1705b3b9bb1ed94fd6d9f6fb7f7bf7db61215c9015793d826ba7562ca4eaad77f76019225382ae62c2eca2e185d"}], 0x630}, 0x0, 0x0, 0x1}, 0x800) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000780)={{r0}, r3, 0x4, @inherit={0x50, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"]}, @devid}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100800}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3219.184828] FAULT_INJECTION: forcing a failure. [ 3219.184828] name failslab, interval 1, probability 0, space 0, times 0 [ 3219.186623] CPU: 0 PID: 14386 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3219.187658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3219.188899] Call Trace: [ 3219.189295] dump_stack+0x107/0x167 [ 3219.189836] should_fail.cold+0x5/0xa [ 3219.190410] ? create_object.isra.0+0x3a/0xa30 [ 3219.191091] should_failslab+0x5/0x20 [ 3219.191657] kmem_cache_alloc+0x5b/0x310 [ 3219.192260] ? mark_held_locks+0x9e/0xe0 [ 3219.192864] create_object.isra.0+0x3a/0xa30 [ 3219.193525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3219.194291] kmem_cache_alloc_bulk+0x168/0x320 [ 3219.194972] io_submit_sqes+0x6fe4/0x8610 [ 3219.195609] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3219.196349] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3219.197083] ? find_held_lock+0x2c/0x110 [ 3219.197693] ? io_submit_sqes+0x8610/0x8610 [ 3219.198344] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3219.199069] ? wait_for_completion_io+0x270/0x270 [ 3219.199784] ? rcu_read_lock_any_held+0x75/0xa0 [ 3219.200460] ? vfs_write+0x354/0xb10 [ 3219.201020] ? fput_many+0x2f/0x1a0 [ 3219.201553] ? ksys_write+0x1a9/0x260 [ 3219.202110] ? __ia32_sys_read+0xb0/0xb0 [ 3219.202718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3219.203483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.204250] do_syscall_64+0x33/0x40 [ 3219.204800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3219.205574] RIP: 0033:0x7f4e9e99fb19 [ 3219.206120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3219.208813] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3219.209961] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3219.211006] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3219.212051] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3219.213113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3219.214156] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:48:01 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) signalfd(r0, &(0x7f00000003c0)={[0x7]}, 0x8) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_setup(0x792e, &(0x7f0000000340)={0x0, 0xbb56, 0x4, 0x3, 0x6, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r10, r1, &(0x7f0000000540)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:01 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x75) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 04:48:01 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3e5f, &(0x7f0000000040)={0x0, 0x1a13, 0x2, 0x3, 0x2c7, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x79ab, &(0x7f0000000240)={0x0, 0x92ca, 0x2, 0x0, 0x165, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x2) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) signalfd4(r3, &(0x7f0000000000)={[0x9]}, 0x8, 0x0) 04:48:01 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:01 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x20000, 0x30, 0xb}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x396e}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4181, &(0x7f0000000240)={0x0, 0x295a, 0x1, 0x3, 0x1000, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x20, 0x210800, 0x12345, {0x0, r4}}, 0x8000) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_complete(r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) io_uring_enter(r6, 0x6b36, 0x8aa5, 0x1, &(0x7f0000000000)={[0x8]}, 0x8) 04:48:01 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 04:48:01 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x20000000, 0x0, 0x0, 0x0) [ 3219.693855] FAULT_INJECTION: forcing a failure. [ 3219.693855] name failslab, interval 1, probability 0, space 0, times 0 [ 3219.696746] CPU: 1 PID: 14422 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3219.698348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3219.700251] Call Trace: [ 3219.700863] dump_stack+0x107/0x167 [ 3219.701741] should_fail.cold+0x5/0xa [ 3219.702649] ? create_object.isra.0+0x3a/0xa30 [ 3219.703720] should_failslab+0x5/0x20 [ 3219.704599] kmem_cache_alloc+0x5b/0x310 [ 3219.705582] ? mark_held_locks+0x9e/0xe0 [ 3219.706631] create_object.isra.0+0x3a/0xa30 [ 3219.707826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3219.709151] kmem_cache_alloc_bulk+0x168/0x320 [ 3219.710377] io_submit_sqes+0x6fe4/0x8610 [ 3219.711384] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3219.712534] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3219.713678] ? find_held_lock+0x2c/0x110 [ 3219.714639] ? io_submit_sqes+0x8610/0x8610 [ 3219.715641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3219.716747] ? wait_for_completion_io+0x270/0x270 [ 3219.717874] ? rcu_read_lock_any_held+0x75/0xa0 [ 3219.718960] ? vfs_write+0x354/0xb10 [ 3219.719844] ? fput_many+0x2f/0x1a0 [ 3219.720777] ? ksys_write+0x1a9/0x260 [ 3219.721670] ? __ia32_sys_read+0xb0/0xb0 [ 3219.722617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3219.723830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3219.725033] do_syscall_64+0x33/0x40 [ 3219.725892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3219.727087] RIP: 0033:0x7f4e9e99fb19 [ 3219.727974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3219.732262] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3219.734063] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3219.735690] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3219.737470] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3219.739163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3219.740828] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:48:19 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 04:48:19 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0xffffffff, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x30a1, &(0x7f0000000140)={0x0, 0x2fcd, 0x1, 0x2, 0x128, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:19 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) getpeername$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0xba) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:19 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x2e26}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7487, &(0x7f0000000000)={0x0, 0xb4bb, 0x2, 0x1, 0x29c, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x1}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0xd, 0x6000, @fd=r6, 0x7ab, &(0x7f0000000240), 0x0, 0x1c, 0x1, {0x1}}, 0x48001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:19 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x0, 0x0, 0x0, {0x0, r8}}, 0xffff) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000340)=0x40000) syz_io_uring_submit(r9, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x7ff) 04:48:19 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9ccb}}, './file0\x00'}) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd=r3, 0xe4, &(0x7f0000002780)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000002580)=""/255, 0xff}, {&(0x7f0000002680)=""/94, 0x5e}, {&(0x7f0000002700)=""/80, 0x50}], 0x6, 0xf, 0x0, {0x0, r7}}, 0x1) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$sock_ifreq(r8, 0x8936, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_names}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r10 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r10, 0x51e07000) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x6, 0x6, 0x3f, 0x3, 0x4, 0x6a43f10, 0x0, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0x10, r10, 0x2) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:19 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0x46ad, 0x1, {0xffffffffffffffff, 0x0, 0x2, 0x0, 0x63de04fe}, 0x7}) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:19 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x2000, 0x0, 0x0) [ 3237.078256] FAULT_INJECTION: forcing a failure. [ 3237.078256] name failslab, interval 1, probability 0, space 0, times 0 [ 3237.080682] CPU: 1 PID: 14437 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3237.082166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3237.083859] Call Trace: [ 3237.084413] dump_stack+0x107/0x167 [ 3237.085180] should_fail.cold+0x5/0xa [ 3237.085986] ? create_object.isra.0+0x3a/0xa30 [ 3237.086923] should_failslab+0x5/0x20 [ 3237.087699] kmem_cache_alloc+0x5b/0x310 [ 3237.088559] ? mark_held_locks+0x9e/0xe0 [ 3237.089436] create_object.isra.0+0x3a/0xa30 [ 3237.090359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3237.091438] kmem_cache_alloc_bulk+0x168/0x320 [ 3237.092412] io_submit_sqes+0x6fe4/0x8610 [ 3237.093402] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3237.094460] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3237.095451] ? find_held_lock+0x2c/0x110 [ 3237.096292] ? io_submit_sqes+0x8610/0x8610 [ 3237.097199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3237.098209] ? wait_for_completion_io+0x270/0x270 [ 3237.099203] ? rcu_read_lock_any_held+0x75/0xa0 [ 3237.100144] ? vfs_write+0x354/0xb10 [ 3237.100915] ? fput_many+0x2f/0x1a0 [ 3237.101677] ? ksys_write+0x1a9/0x260 [ 3237.102478] ? __ia32_sys_read+0xb0/0xb0 [ 3237.103317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3237.104418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3237.105544] do_syscall_64+0x33/0x40 [ 3237.106350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3237.107435] RIP: 0033:0x7f4e9e99fb19 [ 3237.108198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3237.111975] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3237.113543] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3237.114998] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3237.116495] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3237.117964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3237.119421] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:48:19 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:19 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x800000, 0x0, 0x0) 04:48:19 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x20000000, 0x0, 0x0) 04:48:19 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7ff, 0x7, &(0x7f0000001900)=[{&(0x7f0000000580)="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", 0x1000, 0x8}, {&(0x7f0000000340)="d35c57c79234e3bd49afabdc66f0cef075545e90c9b1bb2002aac56c8902fca07c5597f0274d285fd238d993c442623a05c7b77b5f0e5b290e2ac0288f3a570bc11fb9718bfef651215a06b54030819044d43f893e3e7eaef59c953e903ce39da9338cb0f43c482788b89ff4cf4898a92f0a02c41046ddb7be6d94def01b84b6914d304f52d901bc0ad68d146900c185d94c2493ba550037286268e50c2c3fc8dd9c0cccb6e2b908", 0xa8, 0x10000}, {&(0x7f0000000400)="b33dc46b3f878fbdb28ca7324dc488c94e8e6583bc20605a144d93b3dc864b561f10e39e142fca196cf827bdda09e6d1e7cf33de162df232720521bb40e8a8a566cd5794dcd6babd471cc28444d840a19e4ecea5564f1f07885e2e6f22c53745675f6d8415109752daf286c9af500e194f34da11bdd1d6d92e3a7cd5ce07953445ab925973a98d43bdd78bd93c4e2d97a15dc1a3f0961fe2039e49b4daed03c6adca4585c8dbb1f67b0e63537fe304f0032786f40626964787866da88bbc891241", 0xc1, 0x3}, {&(0x7f0000001580)="b9f011ac100b8cb5cefab75c246834f45b11d47da393268ec00f3aced8b3a2831123f20c794896e13a55d8c907cc5dd9af0ac628d53adb252340dac4f7dbdff31393756dbc03c4f76bdce42065e2c2bed40820ff2e51218157974958d2d681854832823992631fc16452cb4f9dc742e6f646a5ed28a91cf90143b7b48fca2ffc2079db9555451143c6b078f636e20dd4d84c55a84fbeab4b53eab5b3522601db66b7c133762f758f3d363e156cc5c3bf91a6986a4a5eda82d57d88ed3bcd77ae2bb429f2e700", 0xc6, 0x5}, {&(0x7f0000001680)="e4f2f14138e538f423bece0d1ede4cd9bff57117bc76273c83c15f1e755c7a69862461a2577554217058584e94f137af2729400df30f70a42c39deaa32cfdf0e1378d8a04db5530e4a11536d4a59c6b84d775eb483a00fd5af544647329b39c42ad5fc89c764228e0a8c6a21c4941647b6c2f96eee9b030c72e40fb1d435160c1f6497930862be056532cff92fec2bfe1ca13052b2f93b84e5e36eb1a6ea23598ee057125d9b83fb183c6be6f70d214fd4efa44fdb53d12cf186b906cefa9a6e978d43406c1706c72506c5818b1cb87ec69fbf60807f", 0xd6, 0xdd18}, {&(0x7f0000001780)="801528f96a9db9c185959f20d4534436df30b8b8647374302fc252085c9e1a2effeab34d6f6adb8fa613d25b3f110090a23a0d03bd2a1034c45c1ddbc4359bf8c67ecf462c98ed73c828be8cfa718b00d9ff53282124a42f89a78d29a5ae088601577b89c9de7839607e8a3d8c43899c5736af2b27f2a23ce2b2b12eed495cd8307bfdfe377bfcd87602108db764147621500aed1ae40592fa9092a7b89b3ddefe4980dc9627c0958526b744bae9bcace51d", 0xb2, 0x2f127773}, {&(0x7f0000001840)="10933210fc4127309dceab73a37eec75c2d7fc11f27b056a15cb92fa77c1bfc015edacae9fae1504290c0816aafae092f1764d8ba1d6b5d9d3098c1d72a266ac819a408474c88080adf58e58e092241140475537c947ab33fc01d983e9e86b6f711a871dd5775da58c1d902a30050abdeb69492a1f648ee2c5afecd36cc44b5276f30e657b8663ab0ce9bc80", 0x8c, 0x30000000}], 0x100000, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=n=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000100000001,obj_type=$:/,\x00']) fcntl$setsig(r3, 0xa, 0x34) 04:48:19 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x30000001}, r0, 0x3, 0x0, 0x1, {0x0, r3}}, 0x1ff) clock_gettime(0x0, &(0x7f0000000240)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)="657f6e1ca078f3401fff9b3b755c726d1abe1a02a993b2214062c081c13dac170475573e72041e8e88370cf998b4a8724ea16715022da56bbe3fec9ba5205975b79c89836ddf1877384b6e7ca55a2cc56e0e4c986c437907ff3b6fcc6008af993e9c41280cb274d6045ce72907956301b9c6b05e9eec496bde3902e6cc720d5f00e329724692321b7756029c6cdb000a74546dba7b5fd9224ee24c86ee5152857f05d47733a0b1799e5073e330740313dfdd9831e88609fcb6e3f650743616a2e7a6ec5329dfdb3151b88cd89330884042b79d5254d78ac55b7cd8e77775719555e49a80279f2905cea0c5", 0xeb}, {&(0x7f0000000500)="9fedea1cfe004d1d31b079d13cf33f6f399b495a168f35484acadd07e2515f298057feb899d20f2ed7", 0x29}], 0x2, &(0x7f0000000580)=[{0xd8, 0x115, 0x8, "e7637c5b679939fd269efc29199ccc81fb5636fc8b13c9bdcc29c13e12ece7d4a25de9fe9be974017e550227ccc6f2511ca0b6c02c15c8b4d6c049841464e778d8d3526ea41b352e7825244b16c856c248a6db55fc1192253d198cbf2bed4ce646e4a59dbc6fa555d9589097f5a4bb7465a22f9f1de625d1d9e69a72bbbb76e56b700128ddcabe68a8c8639ab2c922499f352078af95b9e35d06e25f9307777e443fb66a98fe10b4af6ef8e7ebc9df57aa3fa713b2a761c58f64292a6a30b93700"}], 0xd8}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r8, 0x3699, 0xdd0e, 0x3, &(0x7f00000001c0)={[0x80000001]}, 0x8) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x9) io_uring_enter(r10, 0x4854, 0x25c3, 0x0, &(0x7f0000000180)={[0x9]}, 0x8) 04:48:19 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x575c, 0x0, 0x0, 0x0, 0x0) [ 3237.587882] loop5: detected capacity change from 0 to 135266304 [ 3237.618543] loop5: detected capacity change from 0 to 135266304 04:48:36 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000370000082abd7000fedbdf251e00000142895151044f904b", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340), 0x2, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000001c0)='tunl0\x00') 04:48:36 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x80000000000000, 0x0, 0x0) 04:48:36 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000000)={0x1, 0x8, 0x52, &(0x7f0000000080)=""/82}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r9 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x10010, r5, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x8cfe5d8247fa35c9, 0x0, @fd=r0, 0x0, 0x0, 0xb512, 0x0, 0x0, {0x0, 0x0, r3}}, 0x4) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:36 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/54, 0x36}], 0x3) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4010, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1}, 0x1) 04:48:36 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0x90000, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000009c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r3, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000008c0)=[{&(0x7f0000000000)=""/207, 0xcf}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/210, 0xd2}], 0x9, 0x3, 0x0, {0x0, r9}}, 0x7ff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x1010, r0, 0x8000000) 04:48:36 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x2bda, 0x3, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) io_uring_enter(r4, 0x40, 0xeae5, 0x0, &(0x7f00000003c0)={[0x4]}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8004) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2004, @fd_index=0xa, 0x9, 0x4, 0x80000001, 0x1e, 0x1, {0x1, r9}}, 0xc036) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc}, 0x7) syz_io_uring_setup(0x3c99, &(0x7f0000000240)={0x0, 0x85e1, 0x8, 0x3, 0xd8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r11, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x200) 04:48:36 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 04:48:36 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_setup(0x497a, &(0x7f0000000000)={0x0, 0x324a, 0x2, 0x1, 0xed, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)="cf9b2c41297f3f3deb26f34e5b1d1572c54c61d67a65b649cda1e65c509a3d7bb4ca0539db5e0a62d31507ec458d7d07101cfc4ca86b720c41d8d51fee2f1514f8aeb8fb2daa0e214c732800350a93eadfd836c1eb75f94a1a81a7c36aa24ee01f67c69e99bf0618158316a93b5b9fa7258a1cac9aac1b", 0x77}, {&(0x7f0000000340)="d49ea8104691b6e7dce5c38ac992a214d687e73ed317bfd5c8b88df66f72884f6509fb5204b12028927251668759d9e6e693838a355984e9daf17a6b4f3aa9cba1767d77d1b7374f9a94aab0edbdb4c58ed78110c81fe8b0447ac7204cd023dce557e458285df8d966f3e4", 0x6b}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="e0368679d06968e6d2b5bcace4", 0xd}, {&(0x7f0000000580)="7ef77da8b80bd0d1ec8910fbb9f4e8d9e4f08bc2f77fbbc0c2f2d3e89f322b94eef16cc79785e2e93a279528230f1e59ca97f8490ddf2bb0c531a92686943fe59ae8aed1fd157b12839ddf7c10857dd49b6740fefad4c3abebec5b908bb8e4c7c3ff3d06799932517c6ba3b9b88ec6c0d404e894bfa8565e25e9922c71a138e3000260316f28da68470cf2810daadc57ff1926da91ab771d8894b364c1616a7f26f3f4d219bb23d882d18d444bc0f7d835e9463228a6ef64c216210a", 0xbc}, {&(0x7f0000000640)="ceda8481f2a438eb93bdcdf271ff00e671e54b3aab9b3dbf69b1d88b5afbab5b6c0666299ac07963bcacc15be37353a21738fa46afcf5fea4fc01a43bcbe8150441314b9b51949b7f04b027aed446b7634c04958380366b64f368c902d627fd5844e565b8ffd85de29bd8addb09af98239be2595114afce14168af5a39e05417b760695e6b7ad839edbe1e2a8305efaa5e449fdf1a9de9e342", 0x99}], 0x6}, 0x0, 0x4040000, 0x1}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3254.814698] FAULT_INJECTION: forcing a failure. [ 3254.814698] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.817024] CPU: 0 PID: 14497 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3254.818392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.820037] Call Trace: [ 3254.820574] dump_stack+0x107/0x167 [ 3254.821323] should_fail.cold+0x5/0xa [ 3254.822087] ? create_object.isra.0+0x3a/0xa30 [ 3254.822999] should_failslab+0x5/0x20 [ 3254.823760] kmem_cache_alloc+0x5b/0x310 [ 3254.824577] ? mark_held_locks+0x9e/0xe0 [ 3254.825403] create_object.isra.0+0x3a/0xa30 [ 3254.826278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.827296] kmem_cache_alloc_bulk+0x168/0x320 [ 3254.828214] io_submit_sqes+0x6fe4/0x8610 [ 3254.829074] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3254.830070] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3254.831024] ? find_held_lock+0x2c/0x110 [ 3254.831836] ? io_submit_sqes+0x8610/0x8610 [ 3254.832703] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3254.833668] ? wait_for_completion_io+0x270/0x270 [ 3254.834622] ? rcu_read_lock_any_held+0x75/0xa0 [ 3254.835533] ? vfs_write+0x354/0xb10 [ 3254.836271] ? fput_many+0x2f/0x1a0 [ 3254.836986] ? ksys_write+0x1a9/0x260 [ 3254.837722] ? __ia32_sys_read+0xb0/0xb0 [ 3254.838503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3254.839505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3254.840503] do_syscall_64+0x33/0x40 [ 3254.841223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.842213] RIP: 0033:0x7f4e9e99fb19 [ 3254.842930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3254.846455] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3254.847905] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3254.849255] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3254.850633] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3254.851979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3254.853328] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:48:36 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x800, 0x4000}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:36 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x1f, 0xc2f, 0x0, @private0, @mcast1, 0x40, 0x10, 0x9, 0x98}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001580)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f00000015c0)={0xa70, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "4185a5af91b579297bed59f9d51a7f537c909da387101ec1e59e031887b2a9b7889e400de728f046cd4e229b8dbcf2b1e1a6eb9be243f1afffd963abdf05f4d44d51ee1840301e944ed2d89b052b8909456b963c292ec8d554d8ca8f282f3cbc62fa8dcd1366bfc167dd62e327630857aeebc498912a015fe59953de2dcd34aa9f7c9982a70e1f9077336349493d78cb4e8751a6a5816194e9d53c3a4a89228e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "a6d587bfbeac273d484aa9e6693b35896935f20c364c0cba8cfa24c93dd61732f835c8e42bf369e3ca34672bfda936880de851491fca85400304262a2ed035fcea85c6aeccba74f08047ce438f42ebc4e06c219bc1dbe44ff960a96697d761266a93ff9acd5f98024e596b5b6ecaf119d5b6f8dfd5161b5ef08505f8e4fea39be5ab0053936a62e215aca09bdcfb2ca18d341dce8256a57f2c837a99308b56b929353ba7c372bd719faaf4a3d37583e7ab275ce02645ccc6a9dd93fe6407853bbb83ca632f57d90b2a9cb028b78fcee10439a5c6eac4aff422fa429229701704c9c0d2cdee2816"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5654}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff5c44}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '${\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$*\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "99f1c478ec9d29b6ff119bcbbb2a7514d49694c3b6528a94de2af5ce8870cc1b2d2e9ca00e0e2b680a1756de6f6172cdba9a6fbf2e03e785fdd3a153a95d793e7e11bcc8c5ffbd2c732962b8b5dcd224208670fbe12e7e256b22f163e9e6e2d89d46b504d82c4f279bf00eac840b94a852b873700cf57da0072797b4c5fc2aa640dafb0c9421e70c6f6d342d42136ee3d60fbde84fdba873657cfae23087bd531cfc7a74d54edb94ef985eca44cbb31249da949f72"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x38c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "eedbc788f589640446423e811be68be40ecaca9a4b313c5bdd46044c774c9063ec834c358d54660489b3ef67753486f469e91b17135d2c790b49b44a7ec4abfa3d4fb18a1b46863506e8d529155d04263ddb9b0f8c50a19714fe00484ddefcfc7f4427c22b661255c7869c454ceadbc42355a8d56991a4dbbacba909583cab4326213a888089b0e321fd96574b911c6d8d78cd4336359a1ea95f2ec1ddaf8dda1a2340be379c0aa4390657c0bd10e432b37dfbfa14"}, @ETHTOOL_A_BITSET_MASK={0x14, 0x5, "aeb4b1e306f71fdcad0aee54c5d16b53"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "e58da367461b6abe6b6d08d0654457807ef2e7405a17948f01cec08d08c81ee8e5101a7af1b1969f21f6a352cac3d79c024c5bf46b9b2200395ea3bb7ad25cc1a26a6b204fac28d21b3887a7c25ef2f4cf0a7d3914754662fe1f17f0b7c97ad91f48b31ec8be1ad394dee9a0832a47a73ae555588df0140454a58ffa7cb953efa058945718458923117defb8eacae01626bbc80d4c9b286fa9a7df78073836764ef797277a68003046460bbf4f737c790080ade1848bd2de162fe60c8c1e5836d9700663410fbd74b40f8208335f405e845b3a"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/!.*/{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x79a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x92}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffb}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "78130e84f49647adb3c71500d17bc586a42bfbec6b54f19e4b00f83d067a32a4f2a382e4544c10b18eea776ba938d6c2edaf2871759def2b7af8ae3e2d6fac127eae6a2220b449e457fc1012b2ed98189e0eb9bb9433358580d8576b65009af5d25c5c8889edfbfb91cbff7a292a3a861717c6c443174e6f9915ebba41a1009942c2270bd06e8d76538b7fe73a773199ac478ae41186cbd4cfecfd58e6e23219d4358ac84365c935fddd943370baab83a38b62a1831dc7209bc6e7e6b1c599"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "9c8ae29afa27daf4b37b6ac08550c38b0c4917216cafb58b93eb8e22f54cc430e34bf07d30bc4a294b0124c9c816258b4ffcef9dd5ab668d947cfcbc1314069751ba7f1a2d3d1576aaa7ce7cedb5aefed2037b1a3f05963de453849bcccfc9e7c2dda365c6b729f430fadae4cbb7a3658cde7a5538c8650729b3362fcaac097ce520132b0a10"}, @ETHTOOL_A_BITSET_BITS={0x1bc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[.\xe8#\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+-\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x41}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\%\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x64}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#-\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-\x9f(\'-[,\a{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x65, 0x5, "126ff2a184e1656d731ca33d9de24e6f27c0695cbb5d955b1646c9ee9856609d30465556a58000b3d6a1e8b1dab4ccbd843f1a5cb4486ff0bc162a58094bbdb3aa0a35b5bfb56b393d1a4f3ff16e0d3269293af75c0888e9998f3a41e46224f3b4"}]}]}, 0xa70}}, 0x0) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) io_uring_enter(r6, 0x28c2, 0x3fee, 0x2, &(0x7f0000000080)={[0x3f]}, 0x8) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x19) io_uring_enter(r7, 0x1715, 0xb0e4, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r11, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4004, @fd_index=0x2, 0x5, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, 0x4, 0x1}, 0x2) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:37 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_setup(0x66f2, &(0x7f0000000040)={0x0, 0x3f70, 0x8, 0x0, 0xb3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform', 0x80000, 0x75) fchdir(r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r6, 0x80, &(0x7f0000000240)=@can, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0x13}) syz_io_uring_setup(0x2b51, &(0x7f00000003c0)={0x0, 0xc5c2, 0x4, 0x0, 0x9d, 0x0, r6}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000500)) fcntl$getflags(r6, 0x401) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000340)={0x9, "4586e7421c6f217a918d7c09abfe1847ee12788465af2cf61a143650da9c39d322f9f914e31c629cd6db178e4f8ff6cc8b5ad4b88e15eb19aeb7c058c9007479"}) 04:48:37 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x2000000000000000, 0x0, 0x0) 04:48:37 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x753d, 0x1, 0x1}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r3, 0xe93, 0x0, 0x2, 0x0, 0x0, {0x0, r4}}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:37 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={&(0x7f0000000000), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r7 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r8, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r6, 0x8000000) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r7, 0x10000000) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r8, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r9}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x6890203c36ddb07f, 0x0, 0x0, 0xaecd, &(0x7f00000000c0)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0, r0, r4, r4], 0x9, 0x0, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:37 executing program 5: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) r0 = syz_io_uring_setup(0x4259, &(0x7f00000002c0)={0x0, 0x99ed, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:37 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x204c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x1}, 0x5) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r5, &(0x7f00000000c0)=0x80, &(0x7f0000000240)=@generic, 0x0, 0x800, 0x1}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:37 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 04:48:37 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 04:48:37 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x30, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3255.431039] FAULT_INJECTION: forcing a failure. [ 3255.431039] name failslab, interval 1, probability 0, space 0, times 0 [ 3255.433557] CPU: 1 PID: 14545 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3255.435022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3255.436770] Call Trace: [ 3255.437342] dump_stack+0x107/0x167 [ 3255.438115] should_fail.cold+0x5/0xa [ 3255.438922] ? create_object.isra.0+0x3a/0xa30 [ 3255.439889] should_failslab+0x5/0x20 [ 3255.440727] kmem_cache_alloc+0x5b/0x310 [ 3255.441594] ? mark_held_locks+0x9e/0xe0 [ 3255.442459] create_object.isra.0+0x3a/0xa30 [ 3255.443395] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3255.444483] kmem_cache_alloc_bulk+0x168/0x320 [ 3255.445465] io_submit_sqes+0x6fe4/0x8610 [ 3255.446377] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3255.447437] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3255.448460] ? find_held_lock+0x2c/0x110 [ 3255.449329] ? io_submit_sqes+0x8610/0x8610 [ 3255.450260] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3255.451295] ? wait_for_completion_io+0x270/0x270 [ 3255.452319] ? rcu_read_lock_any_held+0x75/0xa0 [ 3255.453301] ? vfs_write+0x354/0xb10 [ 3255.454086] ? fput_many+0x2f/0x1a0 [ 3255.454854] ? ksys_write+0x1a9/0x260 [ 3255.455650] ? __ia32_sys_read+0xb0/0xb0 [ 3255.456509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3255.457631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3255.458723] do_syscall_64+0x33/0x40 [ 3255.459507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3255.460594] RIP: 0033:0x7f4e9e99fb19 [ 3255.461383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3255.465252] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3255.466863] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3255.468370] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3255.469885] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3255.471396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3255.472901] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:48:51 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x3b2b, 0x86c1, 0x7, &(0x7f0000000000)={[0x9]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:51 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:51 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x1, 0x9, 0x80, 0x0, 0x401, 0x1408, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4011, 0x4, 0x1f, 0x3, 0x7fffffff, 0x3cdf, 0x8000, 0x0, 0x86d, 0x0, 0x80000000}, 0x0, 0xd, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:51 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) io_uring_enter(r3, 0x15df, 0x445a, 0x2, &(0x7f0000000000)={[0x7]}, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:51 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r1, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a5000700000000000000b26e9690f7fad59a03000000cd000000000000000000000000000000000001a580040000000000b664f17b02000000000000007eacf3177c4830daa39375770000ffff00000000000001000080000000080900000000328a000800000000000000040000000000000004000048000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCNOTTY(r2, 0x5422) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) ftruncate(r2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000200)=""/69) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001840)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESHEX=r2, @ANYBLOB="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"]) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) r3 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8044}, {0xffffffffffffffff, 0x8000}], 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 04:48:51 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, 0xffffffffffffffff, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r3, 0x10000000) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r4, 0x0, r8, 0x2, 0x0, 0x1, {0x0, r5}}, 0xfffffffe) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5, r9}}, 0x10000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:51 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x2000) 04:48:51 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) [ 3269.932773] FAULT_INJECTION: forcing a failure. [ 3269.932773] name failslab, interval 1, probability 0, space 0, times 0 [ 3269.934546] CPU: 0 PID: 14568 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3269.935531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3269.936710] Call Trace: [ 3269.937106] dump_stack+0x107/0x167 [ 3269.937635] should_fail.cold+0x5/0xa [ 3269.938180] ? create_object.isra.0+0x3a/0xa30 [ 3269.938827] should_failslab+0x5/0x20 [ 3269.939367] kmem_cache_alloc+0x5b/0x310 [ 3269.939955] ? mark_held_locks+0x9e/0xe0 [ 3269.940540] create_object.isra.0+0x3a/0xa30 [ 3269.941163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3269.941930] kmem_cache_alloc_bulk+0x168/0x320 [ 3269.942590] io_submit_sqes+0x6fe4/0x8610 [ 3269.943205] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3269.943913] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3269.944604] ? find_held_lock+0x2c/0x110 [ 3269.945188] ? io_submit_sqes+0x8610/0x8610 [ 3269.945816] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3269.946503] ? wait_for_completion_io+0x270/0x270 [ 3269.947190] ? rcu_read_lock_any_held+0x75/0xa0 [ 3269.947843] ? vfs_write+0x354/0xb10 [ 3269.948376] ? fput_many+0x2f/0x1a0 [ 3269.948913] ? ksys_write+0x1a9/0x260 [ 3269.949457] ? __ia32_sys_read+0xb0/0xb0 [ 3269.950038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3269.950782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3269.951524] do_syscall_64+0x33/0x40 [ 3269.952050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3269.952769] RIP: 0033:0x7f4e9e99fb19 [ 3269.953297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3269.956021] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3269.957091] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3269.958160] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3269.959164] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3269.960181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3269.961184] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:48:52 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8022, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x2, 0x0, 0x174}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[r0, r0]}, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100), 0x8001) dup3(r4, r4, 0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) r7 = fcntl$getown(r4, 0x9) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800080, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x7f, 0x7, 0x1, 0x4, 0x0, 0x7ff, 0x40, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x9c81, 0x0, 0x7ff, 0x9, 0x4, 0x9, 0x2, 0x0, 0x188d, 0x0, 0xffffffffffff7fe4}, r7, 0xe, r8, 0x8) fchdir(r6) tee(r5, r6, 0x100000001, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x281080) syz_io_uring_submit(r9, 0x0, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0x5) 04:48:52 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x800000) 04:48:52 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:52 executing program 5: r0 = syz_io_uring_setup(0x308e, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x3, 0x71}, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3a2a, 0xc291, 0x1, &(0x7f00000003c0)={[0xffffffff00000001]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0x8, 0x1, &(0x7f0000000000)="1a7b596a4aae3832bdb6c38e7e02a5bfad571493b8b68900eab4474909819c70507fa78c86154dab8060f74658effcdba11ad72343996407254720291b021a1aeda6ae2f29364adc474313b3a4b374d58f91ccd92a6983506f1dd8f6decfd958964c83b760f29a8a9282a3b2267cbdc66710219bd2f9cadf170b27bdf364e6008dc49fb7daa9bd794ea4d97383121c35dbd6fcbef791ac1015c77f5610217d5270cd3ebbbd75d356fabe12bcfa7c977f3c3e59f1c65b28", 0xb7, 0x5, 0x1}, 0xffffffff) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000500), 0x84000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000240)=""/109, 0x6d}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000014000000000017000100000001000000a571f599bfbf98d40e3e099267d6eb4dceb54dd9ce5828829da16638a3369846360100f5c3bbecafef3bde702b0008789c134ea025233f424cc829767362cc4271a4d165ad81353a4b4eae8163892c574abb7b83c0beac46c573df420cf07515cecb0597aff734d68b", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32=r4], 0xc8}, 0x1) signalfd4(r5, &(0x7f00000004c0), 0x8, 0x800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000340)='./file0\x00', 0x200, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000940)={{r8}, "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"}) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000580)={{0x400}, 0x100, './file0\x00'}) 04:48:52 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000080)={0x2, 0x2}) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:48:52 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 04:48:52 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1020}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3270.474155] FAULT_INJECTION: forcing a failure. [ 3270.474155] name failslab, interval 1, probability 0, space 0, times 0 [ 3270.475571] CPU: 0 PID: 14598 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3270.476365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3270.477314] Call Trace: [ 3270.477629] dump_stack+0x107/0x167 [ 3270.478050] should_fail.cold+0x5/0xa [ 3270.478486] ? create_object.isra.0+0x3a/0xa30 [ 3270.479005] should_failslab+0x5/0x20 [ 3270.479440] kmem_cache_alloc+0x5b/0x310 [ 3270.479902] ? mark_held_locks+0x9e/0xe0 [ 3270.480369] create_object.isra.0+0x3a/0xa30 [ 3270.480866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3270.481464] kmem_cache_alloc_bulk+0x168/0x320 [ 3270.481994] io_submit_sqes+0x6fe4/0x8610 [ 3270.482488] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3270.483061] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3270.483616] ? find_held_lock+0x2c/0x110 [ 3270.484096] ? io_submit_sqes+0x8610/0x8610 [ 3270.484594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3270.485149] ? wait_for_completion_io+0x270/0x270 [ 3270.485708] ? rcu_read_lock_any_held+0x75/0xa0 [ 3270.486238] ? vfs_write+0x354/0xb10 [ 3270.486664] ? fput_many+0x2f/0x1a0 [ 3270.487086] ? ksys_write+0x1a9/0x260 [ 3270.487521] ? __ia32_sys_read+0xb0/0xb0 [ 3270.487999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3270.488599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3270.489189] do_syscall_64+0x33/0x40 [ 3270.489622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3270.490209] RIP: 0033:0x7f4e9e99fb19 [ 3270.490636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3270.492732] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3270.493621] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3270.494439] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3270.495256] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3270.496070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3270.496880] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:49:05 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 04:49:05 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:05 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x20000000) 04:49:05 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x4ffd, 0xd276, 0x2, &(0x7f0000000000)={[0x7f]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 04:49:05 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x4000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fsetxattr$security_evm(r4, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "a9888124e35c81801472cd9066830842"}, 0x11, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) io_uring_enter(r5, 0x1e4f, 0x4709, 0x1, &(0x7f00000000c0)={[0x6]}, 0x8) 04:49:05 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r2, &(0x7f00000008c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f00000004c0)=""/123, 0x7b}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000000680)=""/163, 0xa3}], 0x9, &(0x7f0000000800)=""/120, 0x78}, 0x0, 0x10020, 0x0, {0x1}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:05 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20030, r0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$getown(r3, 0x9) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54e8, 0x627f, 0x2, &(0x7f0000000000)={[0x5]}, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) 04:49:05 executing program 3: fsmount(0xffffffffffffffff, 0x1, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) r1 = syz_io_uring_setup(0x36da, &(0x7f00000002c0)={0x0, 0xfffffffb, 0x20, 0x7, 0x71, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)={r4, r5+60000000}, 0x1, 0x1, 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x68) r7 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000000)=[0x0]) semtimedop(r7, &(0x7f0000000180)=[{0x4, 0x4, 0x800}, {0x3140497b11177564, 0x7, 0x2800}, {0x2, 0x5, 0x800}, {0x4, 0x0, 0x1800}, {0x3, 0x100}], 0x5, &(0x7f0000000240)={0x77359400}) [ 3283.756439] FAULT_INJECTION: forcing a failure. [ 3283.756439] name failslab, interval 1, probability 0, space 0, times 0 [ 3283.759014] CPU: 1 PID: 14614 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3283.760548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3283.762404] Call Trace: [ 3283.762993] dump_stack+0x107/0x167 [ 3283.763807] should_fail.cold+0x5/0xa [ 3283.764661] should_failslab+0x5/0x20 [ 3283.765513] kmem_cache_alloc_bulk+0x4b/0x320 [ 3283.766510] io_submit_sqes+0x6fe4/0x8610 [ 3283.767455] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3283.768566] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3283.769650] ? find_held_lock+0x2c/0x110 [ 3283.770561] ? io_submit_sqes+0x8610/0x8610 [ 3283.771530] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3283.772627] ? wait_for_completion_io+0x270/0x270 [ 3283.773679] ? rcu_read_lock_any_held+0x75/0xa0 [ 3283.774705] ? vfs_write+0x354/0xb10 [ 3283.775537] ? fput_many+0x2f/0x1a0 [ 3283.776352] ? ksys_write+0x1a9/0x260 [ 3283.777203] ? __ia32_sys_read+0xb0/0xb0 [ 3283.778136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3283.779304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3283.780467] do_syscall_64+0x33/0x40 [ 3283.781300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3283.782452] RIP: 0033:0x7f4e9e99fb19 [ 3283.783292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3283.787420] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3283.789127] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3283.790728] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3283.792318] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3283.793915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3283.795506] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:49:05 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) io_uring_enter(r3, 0x5e70, 0x135, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x7f) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001e40)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001e00)={&(0x7f0000000340)=@hci={0x1f, 0x1, 0x1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)="63bea841d1b2f21e84c4e7156f33ea0bf2ad6231acf860d5b68c6d303fca01df5b797d30b9e7d21e202615b6819048c35020c17f7c83fdf7ebde8eb9a920f52560e2b1df638c6b4e617c9ed55eb99e325f83b8a0c982b87117e870a9ee0ba61281ea7b5f20454992a2f95677940c38711656dce5054f023ce81d9f87d37a17e6535c81f8f955dd8404266fad7fadedb4b04a3163c54028288299d8ab077a233574abd40207cfa2d39d4db392ab026f4f550a30c369da3bd817c511a5b3d9ce6356ea51753940018fc4be4949a0a2d14da691ee", 0xd3}, {&(0x7f00000003c0)="45d04147c449fd5e86208d97066d86d0593837037ad3f33fc1e256b272ef438ee3df6f82e59b019bdd5ac29d9c4a93dc1f75ca0d8f81b5fe0a88f07fd9a3983ed4684281a9146619561937ea9c028a16aa8f794a14c8f057701f3a6dcdd021aa7db759ebba88301ded902b50ef6193e3dc32ad0518d135c99efbdeee", 0x7c}, {&(0x7f0000000480)="d0c635751cc87ea7f9e89bcba83c12f72d7e13f9edc05547fa359e42ec3dd231313cb97ce0b9adfb946143b808851171110bce1bb4c938c770ff0f776d22c85d91b6667f1f6fbf4d609da8bf5ed96fb58b41fa27f98f8bcdc002421f5cbe85acb2cc32b9728920383bf8f081dbe7b73225c10b41df333b1fc458d63a9b39535f86c81a4e34a80e674c7dee4d36ffb72714aec02693f703", 0x97}, {&(0x7f0000000680)="7be09ce58079bf51433ef5912d7e60b05889801b236b58b1941f65719ed55739a77b07d0c446beee5068582aedc5e5e37096f3a1c984b0d304ad3da65bf7946c2d8d329887d36477e5a3a6d4353ff428b647c6b423a677c881f72941123fcaa84771c81a7013e62fbcd50fbcd545659d02b98630918189ee4bf95c3237b29204da482edae80b5802359f661eff2049da9118c01df6b903505ce091963b3d4457b164798701956f08f7ada96d7259bc965ff1284c8554c8e017e21df5cd78eb92fd2b77ffa2f26efd58e398a27e9773d2842d9bbcdecbf6456f2c10ea1e2c71ad0e475ec1ec063562a929e06606b536aaac32bc9332", 0xf5}, {&(0x7f0000000280)="cc40bee227bb54012d38", 0xa}, {&(0x7f0000000780)="f74f3c305aff3efe7d5f976a27b59fed4f1b93ef91f1873d2fedb00662ba4485fea730c859310b2478a3bb9092cc7d0a05484eb20eb1a2ca8f9732890184840245c980144b7286a4b97eb5fac4949f1e582d9dafe91e7ac87501d77f69bab5f7b18a573703ddc443ad1c246ae40d12ae4c325bf9ca659071d450ed8d81932ac8cf56f130cca371985108ab3bc5e43064ffb5e77b7fb32f0e56906914ffe5913fa136bbaa489a19c7582bd5830253da1be571a1b6fcc67ba33cf8b8744eb1f8e3561bfe5534", 0xc5}], 0x6, &(0x7f0000000900)=[{0x78, 0x34, 0x100, "16cc6f33fd12047d5ef2192e77b54522195584f0c45fa389ecb07d2f8859fcc08c12ef5050394a632ae98a0bbe80a2b7c6e53a4b9f1b4e4c611b11c07928dd31e2497177aabfb371a88d6d2ae9d17af52bcb20dc90ce629de7b7bf09170d8580c0013cab17"}, {0x88, 0x131, 0x1f, "dba47b4bf928255961ff84dd2150631e779d747c999be7c4a072b5d2596d3a82c452f4525556b7c08381235caf79a35a9f6e73fe682dbe35396e5e6c04c9779b8b2254e96f037f46b0dbb30837b769b8b3d38aac59910072474b1dc3ed01152e76c5b89bc108d9fa71fb7f42796d4566f7"}, {0xa8, 0x110, 0x1, "4fd2a6215d64a30e33535e29d68e6027f161649053e621fa2a094019de9ece04a20609b126cc6573ea0d15374a66dbd8b9a47786a7e17df51a1b5728378cb4e2be4e922dfccc67217f9104cf5383c40541e48b7a5c4b393e312636248fa33678ac0d69dd520f942361947dadb1bffec9199a9aa35cc9de7b5e183bbeff5bc733fa5325e4a5e642f2229d19204a35976434719902"}, {0x1010, 0x109, 0x3, "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"}, {0x68, 0x118, 0x8, "503796a7edf9bff49406410408aabe248073bbd517cec045e1e9c8a8d80f30e3ebae28b203f6681bc65bc91f16752e06992b27d2ff340d2b4307e15a3da57faf495d6ad87f14a5258ea35c436475ac80548ede00"}, {0xb8, 0x10e, 0x3, "20986c1dd7ec7c9c83baa86e4f58d59f4a59dfeb2e9cd618f3ae7613f4671da427d67d2f81929ff20d3f4ed7156a80c6cf3ca2bace9c5dd30f711479823b92b5d99102ae252e38cb59ba2b8f9a5e84842d9dd6788ed07c9e717146cf91e98f5986ed5669ef294c01645b9b3f964ed592cbe9686e84dacc510678773327ade473fea1494d3b21e30e235326b6a8c9935bb1960bee67cc55d5b9e31886c3fba3dffcb7"}, {0xf0, 0x101, 0x0, "cc90205f9bb748a5c3e37e0dc600a318329c3bbdfa526be54bdb50a8449a74f615c193fb0d0c0752c7374c95bdf0b335a1545bdecb4bcfee069853a9be5a28d5e5d30d977643918198697106cae650d0f476d31991b18745561e7ca212128ddc60478ee90b2c730e420d869bb8721a80ef93afb475df85fe80e296f7baa5b5aa82a6122065f428cab839b045859b2946d68d1da643f4ed9b72e346f2dc0b15cd6255032a4e79c17acaee464edcb735d17f934b7273dc9fe9c52d825a9ff7eec97d34db56d86062bc12e04a63b1a22a417fa9a2c5dbda324f715828b3"}, {0xf8, 0x1, 0x9, "3a22bf51ca2e2bef83fa682184c532d5a30b77c5b4e1c504099de5b83d79d9f7848afb8b6d06fdfae66d21d3831b0b85dee8630669b09456827a087e813c26247c7a6f33958a6a38d360f9c22165bc9dc3703f5b87c79cd73c122178609bdb209b0785ae854c69b3ee2f16e9dbb8559bc4043c6d8140c70fc839989c4ee249759d366d0922730b2ed8e9a6805d041811c69f35140cbba8e4b621624ad154332428e3685961ab9ce0345906c50b87cde549b6a8b8d3dc093c30986e7aacc0c7dc600b725e60e27597b3841cbb2ba374a859ada866c55f418b2d49c5e7b0f099495acf6a58cc7568df"}, {0x30, 0x0, 0x10001, "8baf3d1d7223b6a3c3ba3c579f6cdce175a090f40d41889816ed858f"}], 0x14f0}, 0x0, 0x40048845}, 0x6) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r9, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000080)={0x142, 0xb0, 0x16}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3ff) io_uring_enter(r0, 0x10058ad, 0x0, 0x0, 0x0, 0x0) 04:49:05 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)="3845b02410c8e7205cf46ffd7a678b9abfd655b1234fc3d8c479bd8cbbcf4f0c26abc554524f8151e05bdb70fe44133cdedf3140c4e693b48008d46dbdcf9f6b04ce726b7e82a1b54e7ca1eaf6a6818305b1d4cf82ccf3990c3e9fbc18c8b346a22190a63f94f2d1863dde2f474409145e525c1408643b3fc1b94db4312eee7381ad671ceb0fd8308856b67d266764d7dcc77dae92e82778530fda152b20da3698ca58f9d711a93b55614fe1294e654c13dfb1688f0dc67140b9e46e5c8e9c4a550b003162eab9dae942441d354620515020e34d47076506f54d72b90fc83baa7bd9ee7b", 0xe4}], 0x1}, 0x0, 0x4020, 0x1, {0x0, r9}}, 0x4) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r10) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x0, @rc={0x1f, @any, 0x5}, @in={0x2, 0x4e21, @multicast2}, @vsock={0x28, 0x0, 0x2711, @local}, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x69, 0x8, 0x8001}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x3, 0x0, 0x0) 04:49:06 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) io_uring_enter(r3, 0x6ed1, 0xdf9f, 0x1, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:06 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 04:49:06 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x28ce, &(0x7f0000000240)={0x0, 0xf592, 0x1, 0x2, 0x175, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd=r0, 0x3f, &(0x7f0000000580)="c24a7a1fca9989363d6beed3a80767f029932f9028b16fe2e10671450630601ff4ce807263616aa0e5fd67b2c0018cce313beeec5b4864c785d83f01908b52a6089af7ddfe95e2ad4b1c501ba20340f0b3747ce410c288ec262e1fbd59eb8f68660f07c9415f7527863f03e625aedffb5aa483d93203b4b6636c1aab7ebf251c816e98a2dd15e76003b2d18f68474e46eb554a6f47435a66d5d7baec76fd4e6fe11fe94c382e9902f51995b14c62b897c83fe1e1a960b134266e3f6cbb3d83dc5e96f21350ac595da3a69321e7fd54bda32a9298020248fc0a5ea9c5ae896c2f9354475fae029a0cc99a0fe6657cfc6d32", 0xf1, 0x15}, 0x8000) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r0, 0x1, &(0x7f0000000340)="d63a91296f8050f227668d1c6393357a76db80990e836ae02aa049ec4fe1786bfc41fa2d25211da5b4cc71457ca38f15416c3a18fa161ce4bc834ca9cbf2221d74f0f8a02bdf25a93e09fec24432b626d63b43acb74408783f79bbf9d04b22bb336086a8ea2b51ee09ff856ab1b10d188ed25cb3a9d88d53ef24232f1d3768a65a45e7eb3f7015d2a85a49aa195e8b4f7e74d396422774b9da5c85e04c", 0x9d, 0xc, 0x1}, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r5, &(0x7f00000001c0)=0x80, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x0, 0x0, 0x1}, 0xffffa183) [ 3284.180617] FAULT_INJECTION: forcing a failure. [ 3284.180617] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.182263] CPU: 0 PID: 14639 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3284.183210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3284.184344] Call Trace: [ 3284.184727] dump_stack+0x107/0x167 [ 3284.185228] should_fail.cold+0x5/0xa [ 3284.185760] ? create_object.isra.0+0x3a/0xa30 [ 3284.186393] should_failslab+0x5/0x20 [ 3284.186915] kmem_cache_alloc+0x5b/0x310 [ 3284.187477] create_object.isra.0+0x3a/0xa30 [ 3284.188082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3284.188779] kmem_cache_alloc_bulk+0x168/0x320 [ 3284.189416] io_submit_sqes+0x6fe4/0x8610 [ 3284.190042] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3284.190719] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3284.191381] ? find_held_lock+0x2c/0x110 [ 3284.191940] ? io_submit_sqes+0x8610/0x8610 [ 3284.192536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3284.193194] ? wait_for_completion_io+0x270/0x270 [ 3284.193875] ? rcu_read_lock_any_held+0x75/0xa0 [ 3284.194507] ? vfs_write+0x354/0xb10 [ 3284.195020] ? fput_many+0x2f/0x1a0 [ 3284.195516] ? ksys_write+0x1a9/0x260 [ 3284.196039] ? __ia32_sys_read+0xb0/0xb0 [ 3284.196607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3284.197329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3284.198052] do_syscall_64+0x33/0x40 [ 3284.198570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3284.199269] RIP: 0033:0x7f4e9e99fb19 [ 3284.199775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3284.202297] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3284.203333] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3284.204305] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3284.205274] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3284.206257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3284.207216] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:49:06 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x80000000000000) 04:49:06 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x800, 0x0, 0x3, 0x0, 0x3}, 0x80) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:06 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x2000000000000000) 04:49:06 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 3284.509894] FAULT_INJECTION: forcing a failure. [ 3284.509894] name failslab, interval 1, probability 0, space 0, times 0 [ 3284.512387] CPU: 1 PID: 14655 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3284.513870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3284.515640] Call Trace: [ 3284.516223] dump_stack+0x107/0x167 [ 3284.517016] should_fail.cold+0x5/0xa [ 3284.517855] ? create_object.isra.0+0x3a/0xa30 [ 3284.518836] should_failslab+0x5/0x20 [ 3284.519663] kmem_cache_alloc+0x5b/0x310 [ 3284.520537] ? create_object.isra.0+0x3ad/0xa30 [ 3284.521544] create_object.isra.0+0x3a/0xa30 [ 3284.522498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3284.523589] __kmalloc_node+0x1ae/0x420 [ 3284.524461] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 3284.525554] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 3284.526609] ? trace_hardirqs_on+0x5b/0x180 [ 3284.527528] kmem_cache_alloc_bulk+0x182/0x320 [ 3284.528513] io_submit_sqes+0x6fe4/0x8610 [ 3284.529428] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3284.530498] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3284.531528] ? find_held_lock+0x2c/0x110 [ 3284.532398] ? io_submit_sqes+0x8610/0x8610 [ 3284.533326] ? __mutex_unlock_slowpath+0xe1/0x600 04:49:06 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x20ed91a4) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd_index=0x2, 0x7, 0x8, 0xfffffeff, 0xc, 0x0, {0x3}}, 0x785) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x20b2, 0x4cca, 0x2, &(0x7f0000000000)={[0x6]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3284.534368] ? wait_for_completion_io+0x270/0x270 [ 3284.535813] ? rcu_read_lock_any_held+0x75/0xa0 [ 3284.536808] ? vfs_write+0x354/0xb10 [ 3284.537616] ? fput_many+0x2f/0x1a0 [ 3284.538391] ? ksys_write+0x1a9/0x260 [ 3284.539201] ? __ia32_sys_read+0xb0/0xb0 [ 3284.540079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3284.541198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3284.542307] do_syscall_64+0x33/0x40 [ 3284.543105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3284.544190] RIP: 0033:0x7f4e9e99fb19 04:49:06 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @private0, 0x2}, 0x1c) fchdir(r4) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) [ 3284.544983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3284.549299] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3284.551301] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3284.553153] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3284.555013] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3284.556858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3284.558708] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:49:06 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x2692, &(0x7f0000000000)={0x0, 0x320d, 0x17, 0x0, 0x26}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000180)) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000c3e000/0x3000)=nil, 0x3000, 0xa, 0x4050, r4, 0x0) 04:49:25 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 04:49:25 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2004, @fd_index=0x2, 0x100000001, &(0x7f0000000000)=""/213, 0xd5, 0x0, 0x1, {0x0, r6}}, 0xffffffff) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fchdir(0xffffffffffffffff) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f0000000240)=[{r9, 0x4208}, {0xffffffffffffffff, 0x2}, {r11, 0x4020}], 0x3, 0x9) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:25 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 04:49:25 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = epoll_create1(0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[r0, r0, r3], 0x3, 0x0, 0x1}, 0x792) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffc) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fcntl$setpipe(r0, 0x407, 0x2) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000080)={0x0, 0x6, 0x6, 0x7f, 0x40, "118f636cdcfcdca835d9f400d6d676bf1e13ee", 0x80000001, 0x2}) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:25 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x2, 0xee00715ad92e7119}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x40090}, 0x40890) 04:49:25 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r10) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x4) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x1054, 0x16, 0x100, 0x70bd2d, 0x25dfdbfd, {0x4}, [@generic="bf50d595d68f76b3711f809ac7f115a21c809e4111d878fb7a7b4270bb0868f44bc6ee72b51b504b8b76de2792874470305cb99f72b8cb9a6b1c865dad9fedfdfaf9865ab1de1815761796abb7e2bcf07506356d8eadfb5c69cb24afeb8232028814d8fc36ee79a173daba776b0fd2866f847b6df6bd17e02ed9baef095b98a60fffdbc887db29cac3c72c6a429b5b1d0f624fce60212deb6c8dcebd0ff8d21f518f7acbdbbc1d92539c54f230573331940593f6c3de83548c558cfc71dabcb9ac291cca253d5b6b17c74e367725616c344769097aa9bc0301b7f628a45bd10d817d198dd6714b36f47a6acc3b9a4acb6358ce900a80dc48691d5d58ba3fbd9dc2a7ca5c44b451ed601596ca184f4f328e8ebf9f31a4670da9a2e22bcdc3431b2c56fe6d645ffdcbf4479f86ba00f8e3c525fa0c051a3ceb7f9b3222df1d17b203ed976d5beb2fac24d0328e1f3750da3b970e375b5a4c1868879d99abfe2263f04a8b055744fa7e6ccebdda5a6f1cc19611adc975e03adec8de644ac2a81c198b10c0ec13a925e0757feb4ac0638fbbf89772df64211e06232ecd694e4a9b41883b04b139be67a8ba7ca141b5b31e816b571e4e17ca4c33e21eba8a08bf3de685445b4975d775a98657ca73494c72d52def969b4ee3da6ab3960dcbaabe74c6f393159da82a5beedfb5f799448cc613f47902bed09cde84d3fe30de03b42fa10f505d376633c50d79d7383d5a554e784887043e3e3e4a039c1c3c38430720c491c74894c6f447fc57bece0f684283df6e92f0dc3dfdb96aa3bef5c0b53016c8fb319cf6381d850d8c257fc57be4a8a4ec0dd4f5b17f6659ea06f543df52320f2a102ce4c6d10ebd37e921648ac0a03ee48f8b9cddcf4075f9ae3e79e3c3646788858362e4c62bc554a606f6d206184d7545af32a5de4490fcfbdc99e9ae6089b57ef223be7c36941ebada844b0b3b1148bea9935e341bd174df2c8cc3e8b6a7954353553d906cbf0e9d962699da45ad6a00b252068db7a4824047d4cfe2f381d409b71e7678ae9e32e000506705dc8428426275bed615c77cad73079116ab18a36e45dd7aee2f322127f0613637e6c3a6a3462016ea87526305d3a917160efba16452297c99a961caea52b35ea573550cfbd0c23e82f849b44ee6736b3a50055d8720c74e8934aee40e8a315afffc7920cac2a6761466ee2be97d390539826b4cb66a18aa026cc66e80d00e922f84c19ee9af5d892edfb8601a15ef28cddbcd95e2fcf0fcdb9a34bd9934f979dca6298c8292897c21b1ab6187c9e514e9b81c3a0cb30b1dd48b69612f89fcd13a889c21c3b54d7e0a949f1cbb5385836e6e2c5bd3c400d859b3889f32b986fcdfa94db8420dc935776f349e72e858ceb6f3d1be2bedc5fc2c6d2c236e8a07375e9eeb1947e81c40957fd1ccff4a4f9b024665c02df39b34257ed0441def29bab098166fc1bd5da8c7211251dcb1f820731d6c0802edbcf88b930eaa2d791df589eb3cea38ffa00c57035df8d8b6fc72d36b67e8219879ec9971d8ffabe72bff314e447e5f45f1642d0e07ac15ec8de68aa10cca7d0229da3c22dfc56327d78f54b2caf350f5a856f40509e2aab91315b2f31588e67e7652d12b37772e2a7d31acad4a6086bf3aeeb5453ef2b259e9298fa4a25b2978caa7022e3ed0e04c44cabc8ea52a0e01648b832d756f5673694e0349b3ac4da87c1f8dc8cc883d20de4523ac52bbe670a2cf18cfad36ddab9c49604731d23ca5f18f613cc4daa569ba5ee70368166e5d92a440bc6a28ff0874b597e853690c6aa798762a9d8ba784965ad7148e2469c152d050f6f2b070a9b21171572e5ac317faed158730b0e7034bd36521886cbb55f349b02f164ef1014800e80bc045a2577619baf5353ef8281e014f5794a94a96564f0261ed8672b37942ab4af1b3c43dc0df945f2f2f9d7622c5cc4d48af119e1813628f85e5990c3eee9d4f532e457a72410056d0f4355e17b88908ff1058a8bdf94b1ae0855ea195b881b10bd1804d0dc422642a4c7ce4b4e92609c46d1dd0efdf0ef059284e19527e4c28db5b9426ac66f84a9bf53f640598d2c4e79c5cab31abfe4528e79d2c49ac21f14235b8d76c7d6a4c8c466bd62479ef89d4b365c62212410d9d4ba48b7da417043e75ca797b6630a91d9ab1fcd9ae3e3309171f5ae9b12d164659df2c0704c9036f62e86a99ac83d8962569f6a692babe0f71678d4d715d4a25a2983fd201c637dfb35a805120b7dd5285d9f939a69ed425072dbe970b998cc2348848c32148b418c29de5cb7cced3a50b759b6e29dac1bab37021e68701a7b10ce1969796e239564a9ccd96a4a77039b35eb602c8dad93a8c2de687ca455e4ea8ab32d1eb24f0f020a9d295566a23198c6d89a1c606c6306a1771b23ad22a1140390aca3e8b32d3426f46aa2b01edb6bc4f26a8a630161b2b513c7ca06c012d46ae5379b88be84ccd1bd3fd03d736bc57111b5ef5596b51c8f4f2c522c3a83f3f9f5500b41d92e4fd2c306d244080dd7d98e8553a32bc2f4c772e05fe93a519740d1a4adcf8f1e056bf9c79767afa9f847abd722ab11cbf56d28b3ab27b300f73d0063f06d9ec904c16591daeae2125cb0c529eba052f4e4d10ec2592dc2105528d4eafd08ff23e3172d5570e3536186ab91fa39b35d7d98283f0b51c73c18315b527acdf80091c7dca6b0ffb0e325798102c69fdb86aa511a0901746d3bebf2bb5a6b6ebd49a1edce4a30041c07b9c47d1c9332043b89a3ab7ff2198b758a98b3fe6cb4c11f779f4a8d851479a0259aeb75bcf968cd3e2e5e188590cbb86d34fc98e1446f5844560a5c47e7df63cf662a5c60c03c18bf8a576d8cc481db7bc1bf9a6d3e0a7653dd21601b7e886edf4bb23543f27bde2ff01cd1b0f7b149aa82c97ea66a2630d18c3732395fd492f9a58d813b31ca1df8e3d02f14878bca3e13cb1c369931cf351772e3f08a4ff07767a4af4802f8fada0f612386b5ebb4c6cc95689f7b6bf43a418c78b52563cfabbb74e66fded0498095d8b5c8784247c90f797c0236c9ea539c1ec1d9c38f409e6ed0c5bba679d907a840b17dd6c4534d4f0d8e22e3034971e0092f2b0ce2326449924ee4d55c0f9a24c9b7baf99ce83af258f95eb7cd55b7a3720837cf06b5d631e27ad10a60ecbaaea168e5f53ee4b0f3a454ef2b2d0e21e7eb2772c017df43a3206cc56ee202f1072472c8ec3db45e5a29476b130f3b1aca2770c2f366c374329a49a6dd9a6d7cf5543c83c8912972e2ec6ed92ca5991246f4877471169cb57f753409096b97e396a00f0c402ff767649ab52cc3f04eeada910fff41fae79faf2580fb9c3ff6dbb456af361cb4d3e4716cf4aa89dc174aacc26805cacdf99ca05b1acc42973ee901b47cc8ae6fb556ec9d29843f5dee5efc9fa05d2017fc4000ab509ebd4885dfc0c4d27cf1769037cb6f44b6193532edc90de28c68b8e6b00e042769d345f82e52fecb8848def2879d1e7d4bfdc47fe2b1421f28ae4cfe7ed684433302154aeddfe28d59fefb1ee721846d38c91af2a497555258a6e8546e41f67ae4baa1c75f3be0fc9be00bf3c20efd8bdb82b893f0cf416476e4e3e778cb66bc897f4e98dec64a199a4e68f15c3821070e67ed020cc782d9510d68c6b46e58a95841f9e3b7605f7a28402983d1b21856787861afedfdf2e7f6dba3ef5d81b0fb7558dcafd942382dc4812d66a94f4992cef61283c3fd14721dbe8b942fa6b6a0e72667fc17678e835fc714687c662ef184e27378bb2043edccad31596ae46dc85b5e5d56c22f1ba427d8fa56001b1ce1e9c07c8d9d52a4c55cccf1fdf7ec7ab747bf141f424efc9498781d8fa34566a3a2d5c78049aacbb3f0ec187abdfc738e5c1c375515bb670a977af6060df8429689fcec68e70ca1bc40e94f898dc7f74003b292229af548d3392d0a35a36bc0296df80423b7585b0bf98e12603d545dd261278252b8ca870c6e03dd2ee9d1c4b57446d4f64c50ce71e8a1044f333ea302116f4497b0ae2078de9fe229ba68b337c475401bcba297d24a302f7d26f21eddc56a8b62b71260cbd42480023976d92c0e7483e779f0b30b113b5491a94398f06059639f891839a83abed80e870c059fdd8cbf8a430beef2f46663d9e7e19a380af07a571f6b3f502dfc94a8ce05999a8c4bad3821632f1af612c099f5259c087e29c74831f3f1dae21190d67f54d1254113c66ecc04a6f25f6661ba200e6032e64a04b091fe27945250917f574b1607cdaa0a8641a56bb43aaf673616a948d143d282cc29abdf1ebdc7898754fd0cad6938e57feba8d7c53be203ba33a79339fca3e03276a623d354c870aa0d5bd199c025a765040ae9bfaabb024bf57e24f7b78981b2d62ede1860d3cffb70c7abebcb2c61f92f0600891fc6f4506ba0d3a7f2764caf57bc9f33b24623f17c148dea608e0e7c320876d7b0c81c08cda03352ab5d1d62adb41a5d497a3ca0c9ca5a97685d6b60570bf19aa5a3759c6cdfa56dd1c76076faa27607431dea358bf04812a06ca068550253262bd1dbf22a7ef10ef368fb767a6980f3ac138969e94eb85b0e90ad8b4556761f996db5b08d2605b84ba91fedc64a9806b973dede104efff52559b2cfe0d5ebe44193ba0c53c50371561b00dcb55d59839d34f57741238b32a1b050202ede713bebafc57163cfa4445c7d4837cee83d704d4971b6ffaa5b360fc42429dd425a14bf7d333ea670ea2db6078abd207b15712a90c100343804aef4a3f278bf87eb2f01b05d4db36807af9e6d4f0cfe77d939a629fc97bc2bca31900699f407a2c898b1d4b66145c9e6ef11e2d0b746b904e4eb8de705ea9255a7a9705359b37c35f2fe4dc96fef7ccc6c06bce52c1e8784c02a97cd2ff5201779d321d33c298274b047628b11279ade0d7d3bcf577ac5de375abbd4156903ab0f83875075773d64923ef0b522bd723f28b4722036a37efea0ce717c3ccc82b5d344fb3352e9b54d8c7d1d4db6cfaa86fae59fb0d22b102619d0d63c7801ed6f9fcd0353223fe4785fa65ddefaaced3c095c68f8821420b9535d7c8644d634e4e55822ec043c75da9ce6af0391b56fdd31700484c627f4e6bc7550ec9a79cc88b7d7b08dcc628c2f502091c6d7b97d19587177601c249ea698f68b37b23ab00560d883ed3aa5c64d052bb9e4304f4f55c6e58039109a3b862d51328eb3cd2753b714b957d4c22068bf9fedd9ec840f8a0d313b233988919496d6be393a278b58978878a614321f10a4971ee828c0c8c809e02fd12ae8b8c637066b640725a5853e8b8ba7f16ff1ad8eff76c4a1b5ac56466ca0ea0e29918abe1c6b918efd080997762fd277429509a454340dd91c61e0979ab5722df56fcc80aa6752d9b707bd2767960805e47e4651fbbcc866f702fc5308b889cd8bc0d814732fc7b84955483aaa09f43dd89a3042c1133d036adbfd209e6800a25ed47c9410b58d13e0b554f29b32c4659c03e928403f6d306f8d3deec2d89d3329cc1fcc95261917fb44bfcb08d1979eea95ca8248bc0c9b71eef461ee20bbac12e3468a5e9d60e3da9a75658b19ba1652f440459a94613534a75519be9f76884fe7a1934050ee1e2498be8ea123a3e2b163b09657340bfc922f2ae6f4c775949c0b48c6ce83b6a4549b0a58107a13e8ddb141781bbcdcb9c11c9497216c42feba64d6891ce67caf341b540fc6bffaad7a5f9488fbd5cb80fbc96410446b4be10ec765344c1153f30923dbc3c96de19bb07", @generic="335787a6485153a5336fd72dbb2a5911dcfd2316aa2128fda592df0faf06317052852752a888dfcacca3097bcd74afeb43d5ff99620bf322bc1cafa679c50f"]}, 0x1054}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:25 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x110, r0, 0x10000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x5, 0x42, 0x0, 0x0, 0x366fa59f9bc69bad, 0x1, {0x0, r12}}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3303.891489] FAULT_INJECTION: forcing a failure. [ 3303.891489] name failslab, interval 1, probability 0, space 0, times 0 [ 3303.893976] CPU: 0 PID: 14678 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3303.895447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3303.897289] Call Trace: [ 3303.897870] dump_stack+0x107/0x167 [ 3303.898646] should_fail.cold+0x5/0xa [ 3303.899453] ? create_object.isra.0+0x3a/0xa30 [ 3303.900510] should_failslab+0x5/0x20 [ 3303.901320] kmem_cache_alloc+0x5b/0x310 [ 3303.902196] ? mark_held_locks+0x9e/0xe0 [ 3303.903060] create_object.isra.0+0x3a/0xa30 [ 3303.903980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3303.905137] kmem_cache_alloc_bulk+0x168/0x320 [ 3303.906125] io_submit_sqes+0x6fe4/0x8610 [ 3303.907118] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3303.908172] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3303.909189] ? find_held_lock+0x2c/0x110 [ 3303.910146] ? io_submit_sqes+0x8610/0x8610 [ 3303.911089] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3303.912110] ? wait_for_completion_io+0x270/0x270 [ 3303.913199] ? rcu_read_lock_any_held+0x75/0xa0 [ 3303.914188] ? vfs_write+0x354/0xb10 [ 3303.914981] ? fput_many+0x2f/0x1a0 [ 3303.915826] ? ksys_write+0x1a9/0x260 [ 3303.916631] ? __ia32_sys_read+0xb0/0xb0 [ 3303.917498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3303.918690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3303.919813] do_syscall_64+0x33/0x40 [ 3303.920609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3303.921782] RIP: 0033:0x7f4e9e99fb19 [ 3303.922584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3303.926554] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3303.928242] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3303.929750] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3303.931351] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3303.932862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.934464] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 [ 3322.979742] FAULT_INJECTION: forcing a failure. [ 3322.979742] name failslab, interval 1, probability 0, space 0, times 0 [ 3322.982189] CPU: 0 PID: 14715 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3322.983642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3322.985368] Call Trace: [ 3322.985924] dump_stack+0x107/0x167 [ 3322.986710] should_fail.cold+0x5/0xa [ 3322.987515] ? create_object.isra.0+0x3a/0xa30 [ 3322.988477] should_failslab+0x5/0x20 [ 3322.989282] kmem_cache_alloc+0x5b/0x310 [ 3322.990145] ? mark_held_locks+0x9e/0xe0 [ 3322.991001] create_object.isra.0+0x3a/0xa30 [ 3322.991924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3322.992999] kmem_cache_alloc_bulk+0x168/0x320 [ 3322.993971] io_submit_sqes+0x6fe4/0x8610 [ 3322.994888] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3322.995930] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3322.996944] ? find_held_lock+0x2c/0x110 [ 3322.997803] ? io_submit_sqes+0x8610/0x8610 [ 3322.998978] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3323.000105] ? wait_for_completion_io+0x270/0x270 [ 3323.001116] ? rcu_read_lock_any_held+0x75/0xa0 [ 3323.002097] ? vfs_write+0x354/0xb10 [ 3323.002882] ? fput_many+0x2f/0x1a0 [ 3323.003639] ? ksys_write+0x1a9/0x260 [ 3323.004432] ? __ia32_sys_read+0xb0/0xb0 [ 3323.005286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3323.006397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3323.007476] do_syscall_64+0x33/0x40 [ 3323.008261] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3323.009326] RIP: 0033:0x7f4e9e99fb19 [ 3323.010117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3323.013961] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3323.015564] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3323.017050] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3323.018556] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3323.020044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3323.021538] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:49:44 executing program 0: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x2) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = getpgid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r6, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x5d, 0x20, 0x7, 0x4, 0x0, 0x1, 0x11, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x1, 0x7f, 0x1, 0x8, 0x6, 0xeb10, 0x0, 0x8000, 0x0, 0x6}, r7, 0x4, r4, 0x3) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000550b00000000000001000000000000000400000000000000ffffffffffffffff000000000000000000000000000000000000000000000000060000000600000000000000000000000000000001000000080000000000000080000000000000000000000000000000000000000000007000"/512]) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:44 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88801) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x6000, @fd=r4, 0xffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)="07470a2c3f5e3ba51efe8498abe1453dea2ba9a7099d124d3a9408931052f13146666f6c300bece18854af9e9733f0ef66b47351fe30c4450fc88fa8f7e001f6bfc43244a24cbc13dbbf39a98da5476b1267f573cae2fe9c390b60b385d647941a517d27197ddc0e87f20c457578285ae7f72a6b74f7d3410042c8f41733cb68b9f32c2166c5b86c849e7adefb05a241d0", 0x91}, {&(0x7f0000000080)="823447b9f17d09a51e97dcc141986d6f3ae722a1225b36be3969dffa69ee5d21c6a1b3d71f806284f3c45efe6ba2b3bd26bcecd8752b4a57c93bc9e8190d2b6762fcb9", 0x43}], 0x2, 0x16, 0x0, {0x2, r8}}, 0x3) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'wg2\x00', {}, 0xfff9}) 04:49:44 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 04:49:44 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, r3, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r6, 0x0, 0x0, 0x0, 0x40012002, 0x1}, 0x1ff) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:44 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r9) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x56240, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="017a0000", @ANYRES32=r10, @ANYBLOB='\x00'/16]) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x40, 0x0, {0x2}}, 0x5) 04:49:44 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r8, 0x0, &(0x7f0000000000)="b6830bb1ffb6118922fa941f58b4d29ca8a89c3d8b254d86701d4a05bfbd39fc4490f33e9314320f7f66d8", 0x2b, 0x20}, 0x40) 04:49:44 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x0, 0x100000001, 0x2, 0x4, 0x1}, {0xcd, 0x8000, 0x100000001, 0x7, 0xb5b4, 0x1}], ['\x00', '\x00']}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:44 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = getpid() pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x2, 0x0, 0x83, 0x0, 0xfffffffffffffff8, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x6}, 0x12e, 0x4, 0x7, 0x8, 0x3ff, 0x7f, 0x40, 0x0, 0xff, 0x0, 0x8}, r4, 0x10, r5, 0x9) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x9}) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x13, @l2={'ib', 0x3a, '\x00'}}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x848bb275c82c7bb5) 04:49:45 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'macvlan1\x00', {0x9c}, 0x2}) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:45 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000080)={0x0, 0xf85e, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000000)) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000040)={0x3, 0x3f}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000580)={{r6}, "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"}) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:45 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x511e, &(0x7f0000000080)={0x0, 0xb65a, 0x10, 0x3, 0x35f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:45 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x118}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16, 0x0, {0x0, r7}}, 0x7fffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1009, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:45 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 04:49:45 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fchdir(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000800)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) getresuid(&(0x7f0000000840), &(0x7f00000000c0)=0x0, &(0x7f0000000180)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r8, r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@debug={'debug', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '}^#/.\x02&}%['}}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, r7}}], [{@audit}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_gt={'uid>', r8}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@audit}, {@dont_appraise}]}}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000580)) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@msize}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@msize}, {@dfltuid={'dfltuid', 0x3d, r11}}, {@loose}, {@access_any}, {@noextend}, {@loose}, {@msize={'msize', 0x3d, 0xf818}}, {@version_9p2000}], [{@measure}, {@fowner_gt={'fowner>', r8}}, {@permit_directio}, {@audit}, {@fowner_eq={'fowner', 0x3d, r12}}]}}) 04:49:45 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x3, 0x0, 0x0, 0x0) 04:49:45 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_uring_enter(r7, 0x3790, 0xee8, 0x2, 0x0, 0x0) 04:49:45 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x80010, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x20010, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000005, 0x100010, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x80000, 0x3, {0x0, r6}}, 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x5, 0x4000, @fd_index=0x8, 0x100, &(0x7f0000000340)="136d6c4810bed44d2a4d3602503fe3d9b0acbdb46ba56f3bb7c37dd14695efebd4c6705239374387899a0f1ddd62abe47966eb2dea34715172e158ec827c46f8aaff3edb45399fd7ce9403fad9efca375a1fa1f8d212303033dff2a8d137e4d119efa6fc1161b76612275ad84c60c8e4430d73facc64cd5946b3f913fe44eef958dd3bf6953e5f5922ad350fad201a5db50e225808bbf1fe0cc681", 0x9b}, 0x5) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 3323.925494] FAULT_INJECTION: forcing a failure. [ 3323.925494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3323.928322] CPU: 1 PID: 14752 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3323.929862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3323.931704] Call Trace: [ 3323.932299] dump_stack+0x107/0x167 [ 3323.933110] should_fail.cold+0x5/0xa [ 3323.933957] __alloc_pages_nodemask+0x182/0x600 [ 3323.934999] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3323.936355] alloc_pages_current+0x187/0x280 [ 3323.937346] allocate_slab+0x26f/0x380 [ 3323.938233] ___slab_alloc+0x470/0x700 [ 3323.939110] ? io_submit_sqes+0x6fe4/0x8610 [ 3323.940095] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 3323.941145] kmem_cache_alloc_bulk+0x1ec/0x320 [ 3323.942171] io_submit_sqes+0x6fe4/0x8610 [ 3323.943126] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3323.944236] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3323.945311] ? find_held_lock+0x2c/0x110 [ 3323.946221] ? io_submit_sqes+0x8610/0x8610 [ 3323.947178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3323.948233] ? wait_for_completion_io+0x270/0x270 [ 3323.949302] ? rcu_read_lock_any_held+0x75/0xa0 [ 3323.950335] ? vfs_write+0x354/0xb10 [ 3323.951156] ? fput_many+0x2f/0x1a0 [ 3323.951952] ? ksys_write+0x1a9/0x260 [ 3323.952785] ? __ia32_sys_read+0xb0/0xb0 [ 3323.953684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3323.954846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3323.955985] do_syscall_64+0x33/0x40 [ 3323.956802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3323.957934] RIP: 0033:0x7f4e9e99fb19 [ 3323.958761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3323.962802] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3323.964464] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3323.966035] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3323.967599] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3323.969184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3323.970773] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:49:46 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_open_dev$usbmon(&(0x7f0000000400), 0x7, 0x208000) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6}, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/tcp_cubic', 0x212000, 0x132) fchdir(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x50, r8, 0x0) syz_io_uring_submit(r9, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6e6e, &(0x7f00000002c0)={0x0, 0x1613, 0x0, 0x2, 0x7c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x5}, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r11 = dup(r8) recvfrom$unix(r11, &(0x7f0000000000)=""/99, 0x63, 0x10140, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 04:49:46 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x101}}, './file0\x00'}) io_uring_enter(r5, 0x26f7, 0x5ad8, 0x1, &(0x7f0000000040)={[0x7]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:49:46 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) fchdir(0xffffffffffffffff) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}, 0xffffffffffffffff, 0x3, 0x0, 0x0, {0x0, r6}}, 0xd80) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3e0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0xa7e) 04:50:02 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)=""/146, 0x92}, {&(0x7f0000000240)=""/95, 0x5f}], 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/sit', 0x400, 0x0) fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x8010) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = io_uring_setup(0x26f9, &(0x7f0000000000)={0x0, 0x49a1, 0x2, 0x0, 0x111, 0x0, r0}) epoll_create(0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x23}}, 0x9) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = getpgid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat(r5, &(0x7f0000000240)='./file0\x00', 0x20000, 0xc4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0102000000000000000031000000080001000000000008000300", @ANYRESOCT=r2, @ANYBLOB="0cfe4a86b0138e0b1c0d00aa0008b26d18", @ANYRES32=r7, @ANYBLOB="080001005b00000008000300", @ANYRES32=r9, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace$setregset(0x4205, r7, 0x200, &(0x7f00000000c0)={&(0x7f0000000180)="3a169687a830ab66be542f3425b743e02b1d476bfd31f1cdd40da1d2c54341cb2bc21c0c5b9a07c61895a73c2c2dff18007dd94ab2016523abf288f4a0ee7b3ce13ffe00a93f75c6f7862a3d", 0x4c}) 04:50:02 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) fchdir(r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0xa, 0x20010, r4, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0xa8171, r4, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x30, r0, 0x0) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 04:50:02 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x5, 0x5, 0x5, 0x2, 0x3, 0x80000000, 0x268, 0x40, 0x206, 0x10000, 0xb0f7, 0x38, 0x1, 0xffff, 0x4, 0x3}, [{0x2, 0x3ff, 0x1, 0x6, 0x8000, 0x4, 0x1ff, 0x7fff}], "a518d255084112613ed4ac0c5128d770162592ca3aeb05bb45e187487a563e7968b379", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa9b) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x5, 0x200000000000, 0x7ff, 0x80}}, 0x400) socket$inet6_udplite(0xa, 0x2, 0x88) [ 3340.263965] FAULT_INJECTION: forcing a failure. [ 3340.263965] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.266453] CPU: 1 PID: 14788 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3340.267931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3340.269705] Call Trace: [ 3340.270293] dump_stack+0x107/0x167 [ 3340.271076] should_fail.cold+0x5/0xa [ 3340.271886] should_failslab+0x5/0x20 [ 3340.272701] kmem_cache_alloc_bulk+0x4b/0x320 [ 3340.273673] io_submit_sqes+0x6fe4/0x8610 [ 3340.274609] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3340.275665] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3340.276704] ? find_held_lock+0x2c/0x110 [ 3340.277574] ? io_submit_sqes+0x8610/0x8610 [ 3340.278528] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3340.279557] ? wait_for_completion_io+0x270/0x270 [ 3340.280584] ? rcu_read_lock_any_held+0x75/0xa0 [ 3340.281573] ? vfs_write+0x354/0xb10 [ 3340.282379] ? fput_many+0x2f/0x1a0 [ 3340.283160] ? ksys_write+0x1a9/0x260 [ 3340.283974] ? __ia32_sys_read+0xb0/0xb0 [ 3340.284853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3340.285965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3340.287084] do_syscall_64+0x33/0x40 [ 3340.287890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3340.288980] RIP: 0033:0x7f4e9e99fb19 [ 3340.289781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3340.293682] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3340.295310] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3340.296839] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3340.298375] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3340.299898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3340.301417] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:50:02 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x3896, &(0x7f0000000000)={0x0, 0x4bea, 0x1, 0x2, 0x50}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000001580)={0x0, 0x3185, 0x0, 0x0, 0x1b0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="28000000000000000185cbdf56e9de3500000005000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64], 0x48}, 0x40000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r6) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f00000003c0)="fdfd59ca10e0aef3c8addc5bce11f497726353b7e4f7855aa3fc9caf24f45b6355495dec889bb5a83416aeba12157e04aea85a538109459f685f12ff24f89f6503604effd8ac3d04a5989d9f9e0aaa0acecdc0d394adbb27e9ac3ede5fe1e5daf8ed1e4fcf20ee2dbf1c021c2a7bed46ef766c8176cd3f5dc9c70211bd59c438591b63ca8ee5325e280d6feaf0bb1708b0705ffd3071cde068120691d08989642f507274b811df0880aaabbd4fcdd21fab9c75274f3ccb449bd4976ce19034bf9f8eb6a851eaa454e335c1", 0xcb}, {&(0x7f0000000180)="5080d55901d3783d9a4c7787acbef6c91095543e69efd61f831794a06a704f9cf3", 0x21}, {&(0x7f0000000580)="bee3b88f01220a7d6ca7d6832db610339e318c6f2cb64d9bc6f7fecc2131c3e54a9144193ffcaf5e9019519a28b79435558d5b8141ea71b2932ae155f5bf37ed01e1e3711df95d809ac28235ec96a1e2a63ec45a471917de04ae514c91c5b8c0eae1ebeec9b251e5c92647ccab4f69153ec8de9e24355f793c6166c858ceccc1eb8f49e7b0f3869b52ae0a3d66adac0fe3290992e854c2b61f49884cadd461b25fe2b45d79842ca2f2f918d7250544b05434cdcc09bbd23decda309bd4c0d626a5de0626d89f5ee8c88650413e18c673373b8a68e9c3a1a38244f481524be3c8f4ba5c7c2b83ed2d1e1f728f5bf4f5dc1b1b6524b66d91a49d3eb839b862accd1e4d026f4ff080d80b1869dcf85d2476a9df9f4b1a7a7fc122b6096eff8cbf3ec76dfe6b9dddcea125a17f4abd08f931674f64eff01aeb62e5b73be8fe4bf075f6c0716f628c363063068523ae9de258bcfac3ebaa45973b4108142a19200c408bc8b0f886b033b3de7bd852188fc2118bfac29ae292602e4197383c631db2bccc22bf63f8c831fc296056c12bad1829ad732afe90e409345665c488421555076365334f3151b3d4b6434227b1b134b0b1388ef2621f1cca429003c3e2f3d20484e8e188f3f367101b4cbb1576cdadf47674fef45497bb6005f2013d872e8e33f5ad08c9c6b38ba3b53f9db9b9ac664692829f8edb54905c170edb89980c6554d94c8c33041e7f98356dc7429de7b21e42d65ee277cf9b2c955ae63bfba4f9999ef91c6a8fb64f172e03473d2d9e1a76e71957a3c08112902cf0c2d0cb9261fb05e08dff3c68a19720db814b7d528a5a65ccdff487f72ca0a1b2a37888a5e3a13c7489c40eb5c303e3188c41e02a53ab721737dcaed34cfaabdc47fa84db750da3d014019791f1f047923161f3f852084928a4014e697ac4260ab54b81629a190b90e547f8ee65a3f6d89ab01ee3f7fc4628c07a684830b8820790d4ed69721e919d2757a4b304e5f18a5daf134b0811cc628706be536da372821414e3428e9983bf5cafe8da330d0f0f3067eb343e725dff40f11e8869aaed3d8c4b8d1b5ec62947e0191307f6835630e6008edcbdb989a61896efd65c6c7266099c02730d57fd48fd3781d5b863b2e59b2553c11730d42961052e305ad15b2385998911660e3043968326adae30b09f801ec4c06e7c166b04436dcd0c3fd6d91539ae2920a8a8673b2ee507cf38b90a8e9bd6ad1c8d81dcbfa43f8d77e5baec868bcd9f691a187183d4ba7d75719b2a2705027e0ddc5d07bf041c82f4d6a7837a2face46d49c9bb97068d849adecbab2d64e963bb5714ce7c908d8f29a6ac0b02b4d02b2482c4f620462b9cfb0e345b5aa863af7bfd19543809ea04e2457d29c6c1ccc607d5338cc680cfef4f9603c8433fc1fc6c3b0caebdec93f10e8973d397727c413ba2d7904e7243d15c20ee2f653efcc2cb10feb73942382fd139145af3c8f361e141a26b2f0c8957e777b82e7b7f69b06884ccfc3d51cf3d36bd56b3232354e2f40cdeddf327b8b9d40f11f9dc3f45ef58f991d0d271d7b70ac63f8b28182a291548c8a29f0961ec6542ac9d1bb2206148637f0649b2fe803364929f46893fcf46bb869d464f5a8ea5a5e9012ab42ae816503470144355cd0ea2615efbf297637912bdea07fc6cbd1a15b229cef882363fd315a9af1efdba253c906f24b60acd05f7cb9d938b4550930cbf394de3df24d6969afbd3cf1a7797a7ea7b56df84d8bd1ece2d55cf9bdbf429d8ae8abab91fce51fed78d14ea4ab475a1b914c4a15c1678ccf2f6b5daf99505610d83b655743d82ca970bb6ba738adf277e0452a76fe05dae250fddf63c15c3c371090714fb72aea42972ed5ff6fa5afacd425fc1f749ec4328ab252b024b45cc861b0e579355520b1ecf11af2264c24d9e446a5aa4b5814172e9e578ce3a60f6268bb7f5e8e39eefe1388ee0be59d7a8b6391e262eb945ab7c3eca88b7e3e54a2ec59a4b57001be4e7a3757fb46000c96e9bb3c591f64694caf33af104febe41e17dbfb206e08f7ec22d74c979fdf1eec7627d22a3dfe73a50d89426ccf2de461f0bfa63265a86d48b42d219bd364df845c51a83483fef081dd08e4c90e932d11181585d91b51a268e32725290b29cac53de379f2768980d95dd1b9984288021cf1efe285cb32a4649838444039f421064c254e279f70179ebde3652b681be3a82276702236cfab1e62ff9e2d88292ec8a32d6cd1cd1a63a6ba941ddaf8dfe233d0c045c2e33569a01153e173a8bbe1963f8985093352de2599013e30c4252f2b2dc412c26b5b4387ab522154a084ebaeaef7e19d72985091eeec2e5c73512052435a3ce8eb28542e9ce0d08bf7439996d52197c4063def9d80f5b2f54c472f9a5aee1a21d8b8816663ccbf2fbca3d4a69faa8e9c84fa9321dcb8f612ebba98f0a7a83de6b065eee8403d6155931857e8da94acaaae2e0241bda9d61be62204f22f9ef039999735f1c61255b5b324b91cc0418bcd7a472042d8a9f306ca564c67b4b616ddefa7e41bcb4dad6bec1b9f0458628cb2e547fc8dad4c9d5d70f5f7b5d47a179b81091fd4cbbf9aee95d6c3a9061ab3fbf413b2707b6cad5d7025b417744ecf69c6ecf7dc87f938c91252eb83702ae6072a6004891b6ef37ac3fedcc9c1a4e0c8d1500c5ed104b866eeb6ad1f60583b00d8464da4858ac5e2b0dcbc0c4f2037a8b85ceaf7b0c4eb8e02230df4884f79b177af6aeed0efa0f530540c0b47caaadd1926ffdc9e9bf7e931611103e100886589eccfa004cb49a2c5bc164d521f090cc663e8a6bacab4dba066460c929a1b297b1b2db2c4f8b8df83f7bb44427f4a2cac6c6c8c7905a52c1be2b8eead6bf81fadf2e3e5357532a5919732d0e8cb61f9c66223431a253182d5e942c28f86e044cc535ce1951daa7c99d08d8fb40ea4e25b5280a0aaced860b2508a44178caeab8a718afcddb0889971c2f7ebbe9be3df4d968c95a79085a8774afae20aee4135e347b655ae31818b41246fed6362b0b149ced49cb15fbf3d7ee50518ef1fcc7038e8eeca3246302082c26ecf95d08a61d07354a09423a85e1befa56f39abf204c32bf3959bde9fd46de456dec4ce025cf6e15f7c32c25349b111ea4b94dcc3de2ff74c88edccdcbc1e608c4ec7f3c2f3b0dd746b02261ffa27b16ac53543ac7b952705d792d917383cc0c89956cf72f641df39ba939574b0232d9e9065ea43505a9c09ed723c0ae1633b8d13ccc78dc0c82f6957a1f494ef59764dd27b7757e6f46994000c00382d4d7ed9ea7acd7d90aabb4b9d2ef6634d94e1b9582460a953106d944e5a70dabe92b742b9e317b63842c073511f33663bbe2aefc82d4a596e267dd9653f9a97400ec3a2afa811bc20ddc75381a35bad7d96e028b84fe01595f9364c71e95ead302366aae99306ab5d8958bdba79cd24d607566b64ea49dc7e8582f3d00d41712873cff719bdf905b8e1caf88b8ed497b2274977d709aac52cbcfb6a7aeb363d27488ddbbbf07595953e3c462d8da633bb72bb8fec9702f4ab39fe7209f5c818c0d6e3cda9e57cfc64c8702ec6ac7e67295b3ac540e8d070faa5bcce0aaa449aa5042f38e66b00b76c774a7898896a254c52743f6e14552d17bd97df6e12fb976aab7fb39fe184742e5add004ecab0dbe883937b6c7485e6f8bbd86e0085d7d5f7455035fbc76e8d45bf7cea1d440f9cf6a15ba5f015eb27543b26a5a8d641d8f7d2e10bd8839f442fc049c0f38a612d6d2941863236885688842ab8e89f4dd8374e247fdcb6e4d270e889e6f740b1bf6f90bdbac27631a235cf14558b6af266a6990f322a00ce292a1502189b7092f9f8636ea201f7ff2ef8f09810a6cd106fe8d69736db39ba6c1efb91982bdaaa63bc1c5da6cadbbcf5de8e2cf67863bdd6b68dd18b15cd1174d51e9eaf162d9e1624a07c42f745e771bf80cc15baa53c42c50db2198a0eeb2d77dc052900cd0d8e4bb6ee7acdb32eeed753c3d35665662633aceeb30751e748ede53202d18432e5bf2c1634e8e39e00195560b49317d1f908a95c2cc22bf77c38c7e5930195fa97f924e3f0abe60acee7e1b96a5c494ef100223e6f72b7a3bbff83948e579d7b31226e10c3874feb8638895459ccf3c29e7adc033bf0ffb4290133cfc7d7ef029b6d29077c943d6037e2de8cc841782b704226e367adda3c79f4f6426564ced13e14d188c76f646a3c4f97fe77483617d2f8bc061e5a13b4100cc04429b4026a9e06c90f4f76cb4f5055553803717a77ea9722c73739c1771a8f374be770458893ee1cf946656f99900a58126ebc57aec699f4a795f0e05b90537a7957949f4cfe7a1e85891334d417ea63467004370a24c6d992aa7b4348c42d0399e1610c991198ff3ccb5a0a569282dc673bf8a99cf3cc92e9b02a55dff2d899743761118efb54436e9d0592acf221e585f03d46309f9c285dca5bbc9d6736325a51f3c66e8b4374619c83c7e4bb698762f2a14324e5dca221b0b50bc409e11599a3147ddfab220e576fa086d6acd4d9a1c04dbfb509e0cd5f033402cab5f76fb89a1c41151221adcce37d88f190a52babfb4bb697d90105dd515b0eb889fc9958e1f1b963750c3a323854d27a3ca437793cb901da91dc2b48ec065b9dc038ef4c3f542339e77b44dd89ad7b73bcd9938cd75262bc2f2ced5f13473398b3a50c70bddf4f51972a08a6a98df00f4490fb9b2014b4ff25d5014550b2dd90f3038bfb724abeaac64114705d76384927425a0a12452ed35f9f7a7a42987b7f2bb1118b7d6996bfc1a448d5d10611d78f8394af2edc9d544409065cf8abf0c014de270e96cd4ad47c568aa32b7d7a9b74cafa05b0b759fca238223768fe7b10c2a0ab8a4486d438e401e2d70a94430bdd5f51da3ccaf676e8547e3b199ba8030f74ca6ca3664847be3ec4bdfae94ec1a297b0da14e36b321544500d4f9b1134e11449a9f388b6e7ca4711d954a13684e11350e315d5b457de511f663338090b7b6073ff511bcbad47bad397dd297693809eb5b78da77fa38c1e5ebc7b53e9e578a32bf8f19623a0c0f0b5b4be87a16fd85b9383b8e3e7224a433026f0bd32101c04e5154f227f42f5fed450bc1c022df6484b8f6cfcc29931e9085baa2efd42c85e9e317a67ddb2c16c88b0dfb2220b7983c37047d5185d49b64bded6c161b23b0a0cfc43ce299bde528e8f702d7008ba8814a712cdd77fab45e9251e6ec64ec88854eb76bd507b959164fd8163551d93af17e772ee23d7f576fba301606445d476c3893b4e49f1cb2bb30b30bc389a24f50acaa9f9a6d7e3d69c8f09a776b607d4f202ddeb41e67599a5ec91178fdcae78873c4b36bdacc46c68d28e50654075f6ad03f793a56f79dca87f16ba0eb5e05502343d10d0d58e0519d6dbefe42c8af0575fd3cebc91c529db322a04557a8a944f1744a83e0ca1d6ce071fcd303b6c71b4857572476c3e8485787bd3277eb4438e11de40fd112f1147b06717b9d266d5848ae39026ba0486c6920915a2aa2c5beb6583ed13fcefaebbabf8134ae5b085f4715f9726af77526ce55cd6d0a64336952d0108bd4f60df97ef424dbe631c368386e1c1689db0cfc646ab46a7fd9112826730a590a01b000bb785fce270ceb52a8551099de57c3e5cdcb92347f3c97915f265d8a28dfac178bbb7318c5d685c039187e4ce133e6e89b80c7442eb7101eaa2ca37d7e42ea7c10eeb1c28428d49f2cbc32f6f91bea7437366c16c42afc7c0e9c", 0x1000}], 0x3, 0x3, 0x400, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) 04:50:02 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/clockevents', 0x0, 0x0) fchdir(r4) io_uring_enter(r4, 0xdc1, 0x47f, 0x3, &(0x7f0000000000)={[0x1]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r4 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r4, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x5, 0x6000, @fd_index=0x3, 0x8001, &(0x7f0000000000)="b0813689aedea86a4d806401c69088ae54fbbe4c8fcbf9c87dfe", 0x1a, 0x1e, 0x1, {0x0, r6}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:02 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0xfffffffe) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000080)=r5, 0x1) 04:50:20 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 04:50:20 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x41) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf8, 0x2, 0x28, 0x7, 0x0, 0x8, 0x1100, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x40020, 0x6, 0x0, 0x0, 0x4, 0x5cb3, 0x4, 0x0, 0x9, 0x0, 0xc1}, 0xffffffffffffffff, 0x10, r4, 0x1) 04:50:20 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) sendmsg$unix(r4, &(0x7f0000000500)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)="7a6dacb17303a9f85fcb23e4a96a3c1072f543a4daa7d47341ccec767a", 0x1d}, {&(0x7f0000000340)="b5a707b0d6c73b6e24682d21227ea0c3e6255e616fc33280b2b5e0e35f1631f3d22540ecdf42e089ba6202c303010c6706a520352467902e8c2508e4e35211230da805c824c5807306aa81d30536ef0d1182692a2864501e5076ba7c7a407562c6d5e6d3aa7953c27fb2c34896c89276b7431cde44cef79d6ce272b1c7cac637674dbed9ffa5e65e7327fcd34d99c43c641686c13625cd4fbc6719e9691434e7e394b6248b7987df85a2d6a52bbeac1a90bf84d7a71cca580fd9167462c3af030cf66b629dec455e2ac75142c2117725ae1e57921a9f720ad88512c845120a2f7eb8a57461a9af21", 0xe8}, {&(0x7f0000000440)="64a2d88df87242c63410a03e31cf9baf2e7e06e46ac8578b1e972e4125fc6d29efbce3e0a1c80b607deaccee2d5d90b475344d02ba983a84ce61970aa49bc35bfc8a5a769174ebc3f2347bc8a1c9102afb794f659363b366fd8426672c6d50c49f21f7f1f18b3ee9e4c78cba2c0dc74075395963e9ea22368249cd81183fd5812fc3f9ffa8b094277399f5b10c18b2c10554a2ef8fa5b2", 0x97}, {&(0x7f0000000580)="213ad3bcc81c69f11ae74fa2f0ea7200f1c60515ac2f5e68f858bc8563954e4aee4908be8e6bc714cea5fc4f3c29d1433f7e4253466492096fdfd568ad4d1c4314ad79831175b72086b4fab8f3780b80e7156902c24177a47e6de1f66ac287214086e2e4f8f30fe67c73cec82029c0d8e5d5e5cf746b8ba9334e3bbdbece49bd4633593ecf3f7ac415ff49cb0f6175c02fdbaade4b2778257ac9777fce2ad00198daad0f5411c566760cf19dd5a1ef27b895", 0xb2}, {&(0x7f0000000240)="a2fe9aee77f0ff219c36f6de73276cedf4d466b560d889a65841a55999a9f95ac73fe70be0a69893eebfab02fadf943ae963f3da1d4a0f4884a5457c4e34cd20b9e146f4edd2cdf18107b6797f6b6e1a76c407600af535c5e77b", 0x5a}, {&(0x7f0000000640)="c6f9c4acffbc033df4f7a7b90e388165cdb0977f34945706693eef8dbeb39a0c9a7e790ae5078a306bd2360fd44b9602fef4178efa5b9ce69619848b91eb3ab11a5bf5c33d81e7be1c4877cd78b067", 0x4f}, {&(0x7f00000006c0)="fe958e1169bbd1f87c2cf9adee8f424afee15d231b6357627f44b43960c55a88a61a974a564ddefb42967665889e42335543a23e74190b403771ff62058d0571308dea899ca07796d760447073a3b232221c57d871a58baa43490299d7d92d75e0be44d628e7e933c556add6340f42c21c1b72da4a1f292f15c4f070e77f961623498323c7aca8b1f910d98b9a2f586f", 0x90}, {&(0x7f00000001c0)="b0f594b5859317e53d5020e9f7291c433bbd8661bd90e4b5827e1b497c", 0x1d}], 0x8, 0x0, 0x0, 0x20}, 0x4) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c}) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000d, 0x50, r4, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x1ff) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r11) syz_io_uring_submit(r8, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0xa, 0x2, {0x0, r9}, 0x98, 0x1, 0x1, {0x0, r10, r11}}, 0xc5) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3358.198102] FAULT_INJECTION: forcing a failure. [ 3358.198102] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.199784] CPU: 0 PID: 14828 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3358.200795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.202003] Call Trace: [ 3358.202409] dump_stack+0x107/0x167 [ 3358.202943] should_fail.cold+0x5/0xa [ 3358.203496] ? create_object.isra.0+0x3a/0xa30 [ 3358.204164] should_failslab+0x5/0x20 [ 3358.204722] kmem_cache_alloc+0x5b/0x310 [ 3358.205311] ? mark_held_locks+0x9e/0xe0 [ 3358.205901] create_object.isra.0+0x3a/0xa30 [ 3358.206544] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3358.207289] kmem_cache_alloc_bulk+0x168/0x320 [ 3358.207966] io_submit_sqes+0x6fe4/0x8610 [ 3358.208597] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3358.209313] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3358.210007] ? find_held_lock+0x2c/0x110 [ 3358.210608] ? io_submit_sqes+0x8610/0x8610 [ 3358.211240] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3358.211938] ? wait_for_completion_io+0x270/0x270 [ 3358.212632] ? rcu_read_lock_any_held+0x75/0xa0 [ 3358.213296] ? vfs_write+0x354/0xb10 [ 3358.213837] ? fput_many+0x2f/0x1a0 [ 3358.214358] ? ksys_write+0x1a9/0x260 [ 3358.214912] ? __ia32_sys_read+0xb0/0xb0 [ 3358.215509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.216264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.217008] do_syscall_64+0x33/0x40 [ 3358.217550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.218287] RIP: 0033:0x7f4e9e99fb19 [ 3358.218838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.221503] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 04:50:20 executing program 7: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) io_uring_enter(r4, 0x44f2, 0x119f, 0x2, &(0x7f0000000080)={[0xfffffffffffffff9]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_MADVISE={0x19, 0x6, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd}, 0x0) syz_io_uring_setup(0x3345, &(0x7f0000000000)={0x0, 0xca18, 0x4, 0x2, 0x338}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x100010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) syz_io_uring_submit(r11, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x6) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x26ed, &(0x7f0000000000)={0x0, 0x1a, 0x10, 0x3, 0xa3, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3358.222615] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3358.223930] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3358.224962] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3358.225982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3358.227020] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:50:20 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x367}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 04:50:20 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x68002, 0x80) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000040)) 04:50:20 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0x3f8, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(0xffffffffffffffff, 0x16a7, 0x624e, 0x2, &(0x7f00000003c0)={[0x101]}, 0x8) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x108) fcntl$lock(r6, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0xffffffffffffffff, r4, 0xffffffffffffffff], 0x3, 0x0, 0x1, {0x0, r7}}, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3358.525990] FAULT_INJECTION: forcing a failure. [ 3358.525990] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.527430] CPU: 0 PID: 14859 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3358.528288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.529312] Call Trace: [ 3358.529644] dump_stack+0x107/0x167 [ 3358.530110] should_fail.cold+0x5/0xa [ 3358.530599] ? create_object.isra.0+0x3a/0xa30 [ 3358.531164] should_failslab+0x5/0x20 [ 3358.531636] kmem_cache_alloc+0x5b/0x310 [ 3358.532140] ? mark_held_locks+0x9e/0xe0 [ 3358.532645] create_object.isra.0+0x3a/0xa30 [ 3358.533187] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3358.533831] kmem_cache_alloc_bulk+0x168/0x320 [ 3358.534412] io_submit_sqes+0x6fe4/0x8610 [ 3358.534948] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3358.535567] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3358.536180] ? find_held_lock+0x2c/0x110 [ 3358.536682] ? io_submit_sqes+0x8610/0x8610 [ 3358.537217] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3358.537809] ? wait_for_completion_io+0x270/0x270 [ 3358.538414] ? rcu_read_lock_any_held+0x75/0xa0 [ 3358.538995] ? vfs_write+0x354/0xb10 [ 3358.539452] ? fput_many+0x2f/0x1a0 [ 3358.539897] ? ksys_write+0x1a9/0x260 [ 3358.540368] ? __ia32_sys_read+0xb0/0xb0 [ 3358.540868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.541519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.542157] do_syscall_64+0x33/0x40 [ 3358.542621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.543250] RIP: 0033:0x7f4e9e99fb19 [ 3358.543717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.545990] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3358.546932] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3358.547815] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3358.548695] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3358.549578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3358.550462] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:50:20 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='.\x00', 0x2, 0x2, &(0x7f0000000080)=[{&(0x7f0000000580)="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", 0x1000, 0x3}, {&(0x7f0000000340)="7e2f89991bd6b69eb24e324df11cb29c08387492a5a2762e80ee8882a09543bc7e68cf6152ef7a8d1458e15941a5997eddaf8c3422ffc5a2300bb48c5b5a9e13c3f8a062e054e3ac6272868bcb5e1aa433f15f1a1cf7d37328d9416d838ea7a81f2dabbd8ece2d73e9bd826fe410c0f8d837831b0bd70ab3e12552873c653e734b42c49a931603c78d249b9fb82a5ee5973c5f6a554331e17d068b8cd24632a79845b46d2c837fe57c9923f9770646f7ef", 0xb1, 0x8001}], 0x800401, &(0x7f0000001580)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xfffffffffffffffd}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@auto_da_alloc}, {@auto_da_alloc}, {@journal_checksum}, {@nodelalloc}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@hash}]}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x1, &(0x7f0000001640)) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x8000, 0x800, 0xe48, 0x2, 0xce]}, &(0x7f0000000080)=0x54) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x30a4, 0x0, 0x0, 0x2a2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) syz_io_uring_submit(r1, r6, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x20, 0x1, 0x1}, 0x5) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r9) syz_io_uring_setup(0x312f, &(0x7f0000000000)={0x0, 0xa23c, 0x1, 0x0, 0x362, 0x0, r9}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 04:50:20 executing program 7: r0 = syz_io_uring_setup(0x575b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xd1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x2, 0x9, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x64, 0x0, 0x3, 0x2d, 0x0, @multicast1, @local, {[@rr={0x7, 0xf, 0x3e, [@multicast2, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x13, [@multicast1, @private=0xa010100, @multicast1]}, @ssrr={0x89, 0x1f, 0x3f, [@private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0x7, [0x1f, 0x6]}, @generic={0x86, 0xf, "48696af1c067856c8cfe34a08f"}, @timestamp={0x44, 0x14, 0xb0, 0x0, 0x0, [0x7ff, 0x9a6, 0x7ff, 0xffffc257]}]}}}}}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000240)={r6, 0x1, 0x6, @link_local}, 0x10) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x9) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:20 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, 0xffffffffffffffff, 0x8000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r6 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r7, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r5, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r6, 0x10000000) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r7, 0x0, r11, 0x2, 0x0, 0x1, {0x0, r8}}, 0xfffffffe) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) io_uring_enter(r5, 0x4fb3, 0x2cbf, 0x0, &(0x7f0000000040)={[0x83]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r5) io_uring_enter(r5, 0xa51, 0x79aa, 0x0, &(0x7f0000000000)={[0x100]}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x404000, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = getpgid(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r7, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x8, 0x80, 0x8f, 0x6, 0x0, 0x1, 0x1140, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x52, 0x7}, 0x1000, 0x7, 0x3, 0x9, 0x5, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0xfffffffffffff73f}, r8, 0x6, r4, 0x0) fchdir(r5) recvfrom(r5, &(0x7f0000000340)=""/214, 0xd6, 0x1, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0, 0x26}, 0x80) io_uring_enter(r0, 0x74e9, 0x2, 0x0, 0x0, 0x0) 04:50:37 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x8, 0x6, 0x0, 0x400, 0x0, 0x1}, 0x8001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) r5 = syz_io_uring_setup(0x12f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x302}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(r6, 0x26, &(0x7f0000001800)={0x1, 0x0, 0x7f, 0x7}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x110, r4, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x80010, r5, 0x10000000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x107}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) io_uring_enter(r4, 0x4a90, 0xf0c9, 0x0, &(0x7f0000000040)={[0x6]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 04:50:37 executing program 4: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12, 0x1}, 0x1) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 1: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000150100000028000c8024000b8008000900dbfa906d080009000000000108000a001d00000008000a00000000000c00010000000000040004808743c8480100000004000880b0f12fe8b068d228e450bd2e8eb578885e5233acf57fcc196206002f603b03adc6630000000000"], 0x54}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x68, 0x0, 0xc05c2b81483fa491, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x68}}, 0x40000) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r9, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x44c080, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x800, 0x300, 0xcb3e7b5913b35d88}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3375.747663] FAULT_INJECTION: forcing a failure. [ 3375.747663] name failslab, interval 1, probability 0, space 0, times 0 [ 3375.749319] CPU: 1 PID: 14913 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3375.750286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3375.751485] Call Trace: [ 3375.751876] dump_stack+0x107/0x167 [ 3375.752393] should_fail.cold+0x5/0xa [ 3375.752936] ? create_object.isra.0+0x3a/0xa30 [ 3375.753581] should_failslab+0x5/0x20 [ 3375.754093] kmem_cache_alloc+0x5b/0x310 [ 3375.754652] ? mark_held_locks+0x9e/0xe0 [ 3375.755200] create_object.isra.0+0x3a/0xa30 [ 3375.755786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3375.756468] kmem_cache_alloc_bulk+0x168/0x320 [ 3375.757088] io_submit_sqes+0x6fe4/0x8610 [ 3375.757666] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3375.758369] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3375.759082] ? find_held_lock+0x2c/0x110 [ 3375.759665] ? io_submit_sqes+0x8610/0x8610 [ 3375.760286] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3375.760976] ? wait_for_completion_io+0x270/0x270 [ 3375.761670] ? rcu_read_lock_any_held+0x75/0xa0 [ 3375.762327] ? vfs_write+0x354/0xb10 [ 3375.762866] ? fput_many+0x2f/0x1a0 [ 3375.763390] ? ksys_write+0x1a9/0x260 [ 3375.763932] ? __ia32_sys_read+0xb0/0xb0 [ 3375.764517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3375.765262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3375.765994] do_syscall_64+0x33/0x40 [ 3375.766524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3375.767258] RIP: 0033:0x7f4e9e99fb19 [ 3375.767786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3375.770397] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3375.771551] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3375.772573] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3375.773591] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3375.774616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3375.775646] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:50:37 executing program 7: r0 = syz_io_uring_setup(0x5f52, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x323}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = getpgid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r6, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0x6, 0x1f, 0x1, 0x0, 0x6, 0xdc52, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0x5}, 0x440, 0x523, 0x1, 0x0, 0xfff, 0xf6e, 0x5, 0x0, 0x8, 0x0, 0x10001}, r7, 0x2, r4, 0x1) io_uring_enter(r0, 0x67f2, 0xb096, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:37 executing program 3: r0 = syz_io_uring_setup(0x1269, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x8000000) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x152ea815763acb3e}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7f2) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x3afb, &(0x7f0000000080)={0x0, 0x5974, 0x4, 0x1, 0x345}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r8) syz_io_uring_submit(r6, r7, &(0x7f0000002800)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r8, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1c024e79}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000340)="37ea3e2fe41f", 0x6}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000380)="53373808df75e6d312444381e4fe96c1553bb61467774f914450e4e56e76070a6fba5967fada1143a603f70a3953b6527e35baa7d8ee8befa1460afd16f3626ec8", 0x41}, {&(0x7f0000000480)="4db927914c8b39a04902ec8141775199cb5ea1cc863352fc40144d172c9909d3066c03083a07cb22341f1b8b150b06707d21e12519f2e14f2308467e20e1e9373eb54a3800bb9d84828c4c317a3cb79821c17648037f2b8266fbd30b5452da2eb141a4b15db8c445b22995f90b3681310687ed7f22b8c493e2d2d6f6c05c7c", 0x7f}, {&(0x7f0000000400)="1bd1763dc0641c2e02fbffa63d35", 0xe}, {&(0x7f0000001580)="5d1d557859afe741697d73347349ce59a297b814e8a4a9a51a708ac90461a14e966437d6c69639075e1d729dcf78c7b40e9fb441f9460fbe7bacbbd23d9029c88188cf5a4533bf8f91e3d1581ad15f6bd9b09a192ad38ad9d0e9608302cc033b36", 0x61}], 0x6, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0x1180}, 0x0, 0x50, 0x1}, 0x1) io_uring_enter(r0, 0x49e6, 0x6ae5, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) 04:50:38 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x1, 0x6, &(0x7f0000000000)=""/127, 0x7f, 0x13, 0x1}, 0x8000) 04:50:38 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x110, r0, 0x2cec0000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:38 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fchdir(0xffffffffffffffff) r6 = syz_open_dev$vcsu(&(0x7f0000000240), 0x7, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = getpgid(0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r8, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000000)="a43b3396506fd61323", 0x9}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, 0xffffffffffffffff}}}], 0x38, 0x20000000}, 0x40044) io_uring_enter(r1, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:38 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 3376.183314] FAULT_INJECTION: forcing a failure. [ 3376.183314] name failslab, interval 1, probability 0, space 0, times 0 [ 3376.184702] CPU: 1 PID: 14946 Comm: syz-executor.5 Not tainted 5.10.257 #1 [ 3376.185511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3376.186476] Call Trace: [ 3376.186806] dump_stack+0x107/0x167 [ 3376.187235] should_fail.cold+0x5/0xa [ 3376.187686] should_failslab+0x5/0x20 [ 3376.188140] kmem_cache_alloc_bulk+0x4b/0x320 [ 3376.188669] io_submit_sqes+0x6fe4/0x8610 [ 3376.189176] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3376.189758] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3376.190334] ? find_held_lock+0x2c/0x110 [ 3376.190821] ? io_submit_sqes+0x8610/0x8610 [ 3376.191339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3376.191913] ? wait_for_completion_io+0x270/0x270 [ 3376.192493] ? rcu_read_lock_any_held+0x75/0xa0 [ 3376.193040] ? vfs_write+0x354/0xb10 [ 3376.193484] ? fput_many+0x2f/0x1a0 [ 3376.193904] ? ksys_write+0x1a9/0x260 [ 3376.194340] ? __ia32_sys_read+0xb0/0xb0 [ 3376.194832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3376.195453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3376.196048] do_syscall_64+0x33/0x40 [ 3376.196489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3376.197077] RIP: 0033:0x7f43c2f01b19 [ 3376.197517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3376.199633] RSP: 002b:00007f43c0477188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3376.200527] RAX: ffffffffffffffda RBX: 00007f43c3014f60 RCX: 00007f43c2f01b19 [ 3376.201365] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3376.202206] RBP: 00007f43c04771d0 R08: 0000000000000000 R09: 0000000000000000 [ 3376.203032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3376.203877] R13: 00007fff723bf83f R14: 00007f43c0477300 R15: 0000000000022000 04:50:38 executing program 0: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x2010, r0, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf8, 0x2, 0x1, {0x0, r5, r0}}, 0x1ff) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x3a00, 0x19f6, 0x2, &(0x7f0000000040)={[0x2]}, 0x8) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:38 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffff9, 0xffffffff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r3) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 04:50:38 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 04:50:38 executing program 2: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x2, 0x12}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x180000}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 04:50:38 executing program 1: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x90}, 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mountstats\x00') r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3376.403693] FAULT_INJECTION: forcing a failure. [ 3376.403693] name failslab, interval 1, probability 0, space 0, times 0 [ 3376.405047] CPU: 1 PID: 14958 Comm: syz-executor.6 Not tainted 5.10.257 #1 [ 3376.405834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3376.406798] Call Trace: [ 3376.407112] dump_stack+0x107/0x167 [ 3376.407533] should_fail.cold+0x5/0xa [ 3376.407973] ? create_object.isra.0+0x3a/0xa30 [ 3376.408498] should_failslab+0x5/0x20 [ 3376.408944] kmem_cache_alloc+0x5b/0x310 [ 3376.409415] create_object.isra.0+0x3a/0xa30 [ 3376.409919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3376.410506] kmem_cache_alloc_bulk+0x168/0x320 [ 3376.411048] io_submit_sqes+0x6fe4/0x8610 [ 3376.411552] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3376.412133] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3376.412690] ? find_held_lock+0x2c/0x110 [ 3376.413162] ? io_submit_sqes+0x8610/0x8610 [ 3376.413665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3376.414225] ? wait_for_completion_io+0x270/0x270 [ 3376.414793] ? rcu_read_lock_any_held+0x75/0xa0 [ 3376.415327] ? vfs_write+0x354/0xb10 [ 3376.415764] ? fput_many+0x2f/0x1a0 [ 3376.416184] ? ksys_write+0x1a9/0x260 [ 3376.416621] ? __ia32_sys_read+0xb0/0xb0 [ 3376.417092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3376.417693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3376.418289] do_syscall_64+0x33/0x40 [ 3376.418738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3376.419327] RIP: 0033:0x7f4e9e99fb19 [ 3376.419754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3376.421869] RSP: 002b:00007f4e9bf15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3376.422756] RAX: ffffffffffffffda RBX: 00007f4e9eab2f60 RCX: 00007f4e9e99fb19 [ 3376.423583] RDX: 0000000000000000 RSI: 00000000010058ab RDI: 0000000000000003 [ 3376.424400] RBP: 00007f4e9bf151d0 R08: 0000000000000000 R09: 0000000000000000 [ 3376.425220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3376.426041] R13: 00007ffe443fc5cf R14: 00007f4e9bf15300 R15: 0000000000022000 04:50:38 executing program 3: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/tcp_cubic', 0x0, 0x0) fchdir(r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) [ 3390.466896] kmemleak: 1055 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88804d954b40 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.054s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88804d954c80 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.055s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88804d954dc0 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.055s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88804694c780 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.055s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88804694c8c0 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.055s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88804694ca00 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.055s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88804694cb40 (size 232): comm "syz-executor.5", pid 14901, jiffies 4298042534 (age 23.055s) hex dump (first 32 bytes): 80 91 cc 08 80 88 ff ff 00 00 00 00 00 00 00 00 ................ 38 20 00 40 00 00 00 00 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000a2ce2416>] io_submit_sqes+0x6fe4/0x8610 [<00000000de458951>] __do_sys_io_uring_enter+0x6b2/0x1890 [<0000000053bd419f>] do_syscall_64+0x33/0x40 [<00000000515fe6a0>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: leak checking failed VM DIAGNOSIS: 04:51:01 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88806ce2f400 RCX=ffffffff820105dc RDX=1ffff1100d9c5e80 RSI=ffffffff8201066c RDI=ffff88806ce2f408 RBP=ffff88806ce2f400 RSP=ffff88806ce09dc0 R8 =0000000000000001 R9 =0000000000000000 R10=ffff88800d82fc90 R11=0000000000000001 R12=ffff88800d82fc90 R13=ffff88806ce2eac0 R14=ffff88806ce2ea40 R15=dffffc0000000000 RIP=ffffffff82009b83 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe16543a020 CR3=000000001ac8c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2932333220657a697328203034623435 XMM03=3120646970202c22352e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20666620666620383820303820383020 XMM06=65747962203233207473726966282070 XMM07=33322065676128203433353234303839 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e9daa0 RBX=0000000000000001 RCX=ffffffff83e8570c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9e268 RBP=ffff888008978000 RSP=ffff888008987e80 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffed100112f000 R14=ffffffff8567b948 R15=0000000000000000 RIP=ffffffff83e9daae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe1da3aff4 CR3=000000001ac8c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2932333220657a697328203034623435 XMM03=3120646970202c22352e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20666620666620383820303820383020 XMM06=65747962203233207473726966282070 XMM07=33322065676128203433353234303839 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000